Closed Bug 827062 Opened 11 years ago Closed 11 years ago

Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html, test_bug611189.html, test_progress_element.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]

Categories

(Core :: JavaScript Engine, defect)

ARM
Android
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: philor, Unassigned)

References

Details

(Keywords: crash, intermittent-failure)

Crash Data

+++ This bug was initially created as a clone of Bug #809322 +++

As also seen in bug 809322 comment 94, and numerous unstarred oranges over the last few days.

https://tbpl.mozilla.org/php/getParsedLog.php?id=18507841&tree=Firefox
Android Armv6 Tegra 250 mozilla-central opt test mochitest-8 on 2013-01-05 16:25:33 PST for push 20d1a5916ef6
slave: tegra-194

PROCESS-CRASH | /tests/layout/style/test/test_media_queries.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]
Crash dump filename: /tmp/tmpI2xL_8/5ff52700-d0a4-ee67-666cf9c7-2a8f0d68.dmp
Operating system: Android
                  0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l nvidia/harmony/harmony/harmony:2.2/FRF91/20110202.102810:eng/test-keys
CPU: arm
     0 CPUs

Crash reason:  SIGSEGV
Crash address: 0x4

Thread 4 (crashed)
 0  libxul.so!js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c
     r4 = 0x50225114    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x54448fa4
     r8 = 0x00000000    r9 = 0xffffff87   r10 = 0x0000011e    fp = 0x000000a1
     sp = 0x4e7fdf90    lr = 0x5406b1b8    pc = 0x54070b34
    Found by: given as instruction pointer in context
 1  libxul.so!JS::AutoGCRooter::traceAll(JSTracer*) [RootMarking.cpp : 648 + 0x12]
     r4 = 0x4e7fe1fc    r5 = 0x50225114    r6 = 0x50225000    r7 = 0x56b7ba84
     r8 = 0x545dcf54    r9 = 0x502251c0   r10 = 0x56b7ba84    fp = 0x000000a1
     sp = 0x4e7fdfb8    pc = 0x5406b1b8
    Found by: call frame info
 2  libxul.so!js::gc::MarkRuntime(JSTracer*, bool) [RootMarking.cpp : 708 + 0x6]
     r4 = 0x50225114    r5 = 0x56b7ba84    r6 = 0x50225000    r7 = 0x56b7ba84
     r8 = 0x545dcf54    r9 = 0x502251c0   r10 = 0x56b7ba84    fp = 0x000000a1
     sp = 0x4e7fdff8    pc = 0x5406b310
    Found by: call frame info
 3  libxul.so!IncrementalCollectSlice [jsgc.cpp : 2634 + 0xa]
     r4 = 0x50225000    r5 = 0x5b43b8cc    r6 = 0x00000000    r7 = 0x50225000
     r8 = 0x56b7ba84    r9 = 0x502251c0   r10 = 0x56b7ba84    fp = 0x000000a1
     sp = 0x4e7fe048    pc = 0x53efbbac
    Found by: call frame info
 4  libxul.so!GCCycle [jsgc.cpp : 4160 + 0x1e]
     r4 = 0x50225000    r5 = 0x54440920    r6 = 0x00000000    r7 = 0x50225a50
     r8 = 0x50225000    r9 = 0x00000000   r10 = 0x00000000    fp = 0x00000000
     sp = 0x4e7fe0d8    pc = 0x53efd69c
    Found by: call frame info
 5  libxul.so!Collect [jsgc.cpp : 4278 + 0x16]
     r4 = 0x50225000    r5 = 0x502251c0    r6 = 0x00000004    r7 = 0x00000000
     r8 = 0x00000002    r9 = 0x00000000   r10 = 0x00000000    fp = 0x548ea710
     sp = 0x4e7fe110    pc = 0x53efda98
    Found by: call frame info
 6  libxul.so!js::gc::ArenaLists::refillFreeList(JSContext*, js::gc::AllocKind) [jsgc.cpp : 4301 + 0x16]
     r4 = 0x00000003    r5 = 0x50c18000    r6 = 0x545dcf54    r7 = 0x50c18024
     r8 = 0x50225000    r9 = 0x00001000   r10 = 0x509651a0    fp = 0x548ea710
     sp = 0x4e7fe140    pc = 0x53efdfc8
    Found by: call frame info
 7  libxul.so!js::NewDenseCopiedArray(JSContext*, unsigned int, JS::Value const*, JSObject*) [jsgcinlines.h : 527 + 0xe]
     r4 = 0x00000000    r5 = 0x548ea710    r6 = 0x50239b38    r7 = 0x00001360
     r8 = 0x0000011e    r9 = 0x00001000   r10 = 0x509651a0    fp = 0x50971e80
     sp = 0x4e7fe198    pc = 0x53eb69bc
...
https://tbpl.mozilla.org/php/getParsedLog.php?id=18505491&tree=Mozilla-Inbound
Summary: Intermittent test_media_queries.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c] → Intermittent test_media_queries.html, test_input_number_value.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]
Summary: Intermittent test_media_queries.html, test_input_number_value.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c] → Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]
https://tbpl.mozilla.org/php/getParsedLog.php?id=18521179&tree=Mozilla-Inbound
Summary: Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c] → Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html, test_bug611189.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]
https://tbpl.mozilla.org/php/getParsedLog.php?id=18530295&tree=Mozilla-Inbound
Summary: Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html, test_bug611189.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c] → Intermittent test_media_queries.html, test_input_number_value.html, test_bug475636.html, test_bug611189.html, test_progress_element.html | application crashed [@ js::gc::MarkArraySlots(JSTracer*, unsigned int, js::HeapSlot*, char const*) + 0x3c]
Blocks: 827199
Depends on: 826824
Blocks: 829833
Blocks: 831752
Bill, could you find an owner for this? This crash is spread over several bugs, but combined is actually quite frequent on TBPL. Cheers :-)
Flags: needinfo?(wmccloskey)
This seemed to disappear on 2/28. Yay.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(wmccloskey)
Resolution: --- → WONTFIX
Resolution: WONTFIX → WORKSFORME
You need to log in before you can comment on or make changes to this bug.