Closed Bug 817897 Opened 12 years ago Closed 12 years ago

Intermittent Assertion failure: !cell->compartment()->isCollecting() in browser_dbg_chrome-debugging.js [@ ShouldMarkCrossCompartment]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 815999

People

(Reporter: RyanVM, Unassigned)

Details

(Keywords: assertion, intermittent-failure)

Crash Data

https://tbpl.mozilla.org/php/getParsedLog.php?id=17570648&tree=Mozilla-Inbound

Rev5 MacOSX Mountain Lion 10.8 mozilla-inbound debug test mochitest-browser-chrome on 2012-12-03 15:18:21 PST for push 66888378b4ac
slave: talos-mtnlion-r5-064

TEST-START | chrome://mochitests/content/browser/browser/devtools/debugger/test/browser_dbg_chrome-debugging.js
++DOCSHELL 0x10fbe2c30 == 14 [id = 2781]
++DOMWINDOW == 56 (0x15ab8b768) [serial = 7355] [outer = 0x0]
++DOMWINDOW == 57 (0x15b873628) [serial = 7356] [outer = 0x15ab8b6e0]
WARNING: NS_ENSURE_TRUE(mMutable) failed: file ../../../../netwerk/base/src/nsSimpleURI.cpp, line 272
WARNING: NS_ENSURE_TRUE(mMutable) failed: file ../../../../netwerk/base/src/nsSimpleURI.cpp, line 272
WARNING: NS_ENSURE_TRUE(frame) failed: file ../../../layout/base/nsPresContext.cpp, line 1179
WARNING: NS_ENSURE_TRUE(frame) failed: file ../../../layout/base/nsPresContext.cpp, line 1179
WARNING: NS_ENSURE_TRUE(frame) failed: file ../../../layout/base/nsPresContext.cpp, line 1179
++DOMWINDOW == 58 (0x16a3fad78) [serial = 7357] [outer = 0x15ab8b6e0]
WARNING: Unable to test style tree integrity -- no content node: file ../../../layout/base/nsCSSFrameConstructor.cpp, line 8267
TEST-PASS | chrome://mochitests/content/browser/browser/devtools/debugger/test/browser_dbg_chrome-debugging.js | Found a chrome debugging actor.
Assertion failure: !cell->compartment()->isCollecting(), at ../../../js/src/gc/Marking.cpp:603
TEST-UNEXPECTED-FAIL | chrome://mochitests/content/browser/browser/devtools/debugger/test/browser_dbg_chrome-debugging.js | Exited with code 1 during test run
INFO | automation.py | Application ran for: 0:22:30.870502
INFO | automation.py | Reading PID log: /var/folders/gz/qh20vy1976xgt8rq8khldpz800000w/T/tmpWERZd7pidlog
Downloading symbols from: http://ftp-scl3.mozilla.com/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-macosx64-debug/1354574861/firefox-20.0a1.en-US.mac64.crashreporter-symbols.zip
PROCESS-CRASH | chrome://mochitests/content/browser/browser/devtools/debugger/test/browser_dbg_chrome-debugging.js | application crashed [@ ShouldMarkCrossCompartment]
Crash dump filename: /var/folders/gz/qh20vy1976xgt8rq8khldpz800000w/T/tmpILA_0m/minidumps/D7E77C21-B185-4FC4-AAE9-F8C83D779C26.dmp
Operating system: Mac OS X
                  10.8.0 12A269
CPU: amd64
     family 6 model 42 stepping 7
     8 CPUs

Crash reason:  EXC_BAD_ACCESS / KERN_INVALID_ADDRESS
Crash address: 0x0

Thread 0 (crashed)
 0  XUL!ShouldMarkCrossCompartment [Heap.h : 818 + 0x0]
    rbx = 0x00007fff7c48ac68   r12 = 0x0000000106233200
    r13 = 0x0000000104f832b8   r14 = 0x00000001536bfb00
    r15 = 0x0000000104f832b8   rip = 0x0000000103245973
    rsp = 0x00007fff5fbfa3b0   rbp = 0x00007fff5fbfa3d0
    Found by: given as instruction pointer in context
 1  XUL!js::gc::MarkCrossCompartmentObjectUnbarriered(JSTracer*, JSObject*, JSObject**, char const*) [Marking.cpp : 625 + 0x7]
    rbx = 0x0000000104f832b8   r12 = 0x00000001536bfb00
    r13 = 0x0000000104f832b8   r14 = 0x00000001036ba13a
    r15 = 0x00007fff5fbfa418   rip = 0x000000010324576b
    rsp = 0x00007fff5fbfa3e0   rbp = 0x00007fff5fbfa400
    Found by: call frame info
 2  XUL!DebuggerObject_trace [Debugger.cpp : 3773 + 0x11]
    rbx = 0x00000001536bfb00   r12 = 0x00000001536bfb00
    r13 = 0x0000000104f832b8   r14 = 0x0000000104f832b8
    r15 = 0x0000000104f83000   rip = 0x000000010319b804
    rsp = 0x00007fff5fbfa410   rbp = 0x00007fff5fbfa430
    Found by: call frame info
 3  XUL!js::GCMarker::processMarkStackTop(js::SliceBudget&) [Marking.cpp : 1375 + 0x4]
    rbx = 0x000000016aa48150   r12 = 0x00000001536bfb00
    r13 = 0x0000000104f832b8   r14 = 0x0000000104f832b8
    r15 = 0x0000000104f83000   rip = 0x000000010324b4a9
    rsp = 0x00007fff5fbfa440   rbp = 0x00007fff5fbfa490
    Found by: call frame info
 4  XUL!js::GCMarker::drainMarkStack(js::SliceBudget&) [Marking.cpp : 1419 + 0xa]
    rbx = 0x0000000104f832b8   r12 = 0x0000000104f833f8
    r13 = 0x0000000000000000   r14 = 0x00007fff5fbfa510
    r15 = 0x0000000104f83000   rip = 0x000000010324726b
    rsp = 0x00007fff5fbfa4a0   rbp = 0x00007fff5fbfa4c0
    Found by: call frame info
 5  XUL!IncrementalCollectSlice [jsgc.cpp : 3778 + 0xb]
    rbx = 0x0000000104f83000   r12 = 0x0000000104f833f8
    r13 = 0x0000000000000000   r14 = 0x0000000000000000
    r15 = 0x0000000104f83000   rip = 0x000000010303523e
    rsp = 0x00007fff5fbfa4d0   rbp = 0x00007fff5fbfa650
    Found by: call frame info
The stack for this has changed a little bit due to a patch Jon landed recently. But it's still the same problem.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.