815660 - Intermittent crash in test_dynUnsecurePicture.html [@ js::gc::MarkTypeObject(JSTracer*, js::EncapsulatedPtr<js::types::TypeObject, unsigned long>*, char const*)]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Ed Morley [:emorley]]

Rev4 MacOSX Snow Leopard 10.6 mozilla-inbound opt test mochitest-5 on 2012-11-26 19:30:11 PST for push 20c8c8762a0c

slave: talos-r4-snow-051

https://tbpl.mozilla.org/php/getParsedLog.php?id=17360511&tree=Mozilla-Inbound

{
159284 INFO TEST-START | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html
159285 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | , expected secure got secure
159286 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | for 'secure' expected flags [0,0,0],
159287 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | src='http://...' changed to broken, expected broken got broken
159288 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | for 'broken' expected  flags [0,1,0], src='http://...' changed to broken
159289 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | img.src secure again, expected https://example.com/tests/security/ssl/mixedcontent/moonsurface.jpg got https://example.com/tests/security/ssl/mixedcontent/moonsurface.jpg
159290 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | security full after navigation, expected secure got secure
159291 INFO TEST-PASS | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | for 'secure' expected flags [0,0,0], security full after navigation
TEST-UNEXPECTED-FAIL | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:02:34.223062
INFO | automation.py | Reading PID log: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmp9ZAKhtpidlog
Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64/1353982923/firefox-20.0a1.en-US.mac.crashreporter-symbols.zip
PROCESS-CRASH | /tests/security/ssl/mixedcontent/test_dynUnsecurePicture.html | application crashed (minidump found)
Crash dump filename: /var/folders/Hs/HsDn6a9SG8idoIya6p9mtE+++TI/-Tmp-/tmpeonOCd/minidumps/F7962459-9C28-44D5-BB7C-F7F258AB8621.dmp
Operating system: Mac OS X
                  10.6.8 10K549
CPU: amd64
     family 6 model 23 stepping 10
     2 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x18

Thread 0 (crashed)
 0  XUL!js::gc::MarkTypeObject(JSTracer*, js::EncapsulatedPtr<js::types::TypeObject, unsigned long>*, char const*) [Heap.h : 486 + 0x0]
    rbx = 0x000000011e3dc040   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc6b0   r14 = 0x0000000000000000
    r15 = 0x00007fff5fbfc6c0   rip = 0x000000010280801c
    rsp = 0x00007fff5fbfc650   rbp = 0x00007fff5fbfc680
    Found by: given as instruction pointer in context
 1  XUL!js::ObjectImpl::markChildren(JSTracer*) [ObjectImpl.cpp : 278 + 0x12]
    rbx = 0x000000011e3dc040   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc780   r14 = 0x00007fff5fbfc6b0
    r15 = 0x00007fff5fbfc780   rip = 0x00000001027b2510
    rsp = 0x00007fff5fbfc690   rbp = 0x00007fff5fbfc6a0
    Found by: call frame info
 2  XUL!UnmarkGrayChildren [nsXPConnect.cpp : 638 + 0xa]
    rbx = 0x000000011e3dc040   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc780   r14 = 0x0000000000000000
    r15 = 0x00007fff5fbfc780   rip = 0x0000000101b1108b
    rsp = 0x00007fff5fbfc6b0   rbp = 0x00007fff5fbfc710
    Found by: call frame info
 3  XUL!js::gc::MarkTypeObject(JSTracer*, js::EncapsulatedPtr<js::types::TypeObject, unsigned long>*, char const*) [Marking.cpp : 141 + 0x4]
    rbx = 0x00000001316bf9c0   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc780   r14 = 0x000000011e3dc000
    r15 = 0x00007fff5fbfc790   rip = 0x0000000102808032
    rsp = 0x00007fff5fbfc720   rbp = 0x00007fff5fbfc750
    Found by: call frame info
 4  XUL!js::ObjectImpl::markChildren(JSTracer*) [ObjectImpl.cpp : 278 + 0x12]
    rbx = 0x00000001316bf9c0   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc850   r14 = 0x00007fff5fbfc780
    r15 = 0x00007fff5fbfc850   rip = 0x00000001027b2510
    rsp = 0x00007fff5fbfc760   rbp = 0x00007fff5fbfc770
    Found by: call frame info
 5  XUL!UnmarkGrayChildren [nsXPConnect.cpp : 638 + 0xa]
    rbx = 0x00000001316bf9c0   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc850   r14 = 0x0000000000000000
    r15 = 0x00007fff5fbfc850   rip = 0x0000000101b1108b
    rsp = 0x00007fff5fbfc780   rbp = 0x00007fff5fbfc7e0
    Found by: call frame info
 6  XUL!js::gc::MarkObjectUnbarriered(JSTracer*, JSObject**, char const*) [Marking.cpp : 141 + 0x4]
    rbx = 0x00000001316bfa80   r12 = 0x0000000152cdb580
    r13 = 0x00007fff5fbfc850   r14 = 0x00000001316bf000
}

Comment 1

[Ed Morley [:emorley]]

Resolving WFM keyword:intermittent-failure bugs last modified >3 months ago, whose whiteboard contains none of:
{random,disabled,marked,fuzzy,todo,fails,failing,annotated,time-bomb,leave open}

There will inevitably be some false positives; for that (and the bugspam) I apologise. Filter on orangewfm.