Closed Bug 846282 Opened 9 years ago Closed 8 years ago

Thunderbird crash in js::gc::MarkInternal

Categories

(Thunderbird :: General, defect)

x86
All
defect
Not set
critical

Tracking

(Not tracked)

RESOLVED WORKSFORME

People

(Reporter: wsmwk, Unassigned)

References

Details

(Keywords: crash, regression)

Crash Data

topcrash for TB17.x for the combined signatures of 
[@ js::gc::MarkInternal<JSString>(JSTracer*, JSString**)]
[@ js::gc::MarkInternal<js::ArgumentsObject>(JSTracer*, js::ArgumentsObject**) ]
... in top 20 

(this may end up being a duplicate bug, but ...)
keep Thunderbird separate from firefox bug 744175 because tbird history seems to have different path compared to firefox.  comparing only js::gc::MarkInternal<JSString>(JSTracer*, JSString**) as best as I can determine with limited time ...

1. early history: firefox crashes first start in 13.0.a2. thunderbird start in 14 beta
2. middle history: rare crashes in TB14. Firefox 14, crashes are common
3. recent history: topcrash in TB17.0.2. Did not check the other 17.x.  Perhaps also in 15.0.1 and 16.0.2.  Versus Firefox which is not currently a topcrash and as of bug 744175 comment 20 it was low volume. 
(I did not make allowance for firefox signatures possibly changing over time)

no correlations found to any addons

side note - some tbird crashes have fun_trace in stack, mentioned in bug 744175  as being an "older" crash.


This bug was filed from the Socorro interface and is 
report bp-953fedd7-5a92-4105-a79e-79b872130228 .
============================================================= 
0	mozjs.dll	js::gc::MarkInternal<JSString>	js/src/gc/Marking.cpp:118
1	mozjs.dll	js::gc::MarkString	js/src/gc/Marking.cpp:242
2	mozjs.dll	JSScript::markChildren	js/src/jsscript.cpp:2430
3	mozjs.dll	js::TraceChildren	js/src/gc/Marking.cpp:1295
4	xul.dll	TraverseGCThing	js/xpconnect/src/nsXPConnect.cpp:868
5	xul.dll	nsXPConnectParticipant::TraverseImpl	js/xpconnect/src/nsXPConnect.cpp:880
6	xul.dll	GCGraphBuilder::Traverse	xpcom/base/nsCycleCollector.cpp:1782
7	xul.dll	nsCycleCollector::MarkRoots	xpcom/base/nsCycleCollector.cpp:2098
8	xul.dll	nsCycleCollectorRunner::Run	xpcom/base/nsCycleCollector.cpp:3110
9	xul.dll	nsThread::ProcessNextEvent	xpcom/threads/nsThread.cpp:624 

bp-625cb527-6c19-4a24-9be2-ec1052130227 17.0.3


[@ js::gc::MarkInternal<js::ArgumentsObject>(JSTracer*, js::ArgumentsObject**) ]
bp-295f54bc-3f08-497e-8802-cf9302130227
0	mozjs.dll	js::gc::MarkInternal<js::ArgumentsObject>	js/src/gc/Marking.cpp:115
1	mozjs.dll	js::gc::MarkKind	js/src/gc/Marking.cpp:262
2	mozjs.dll	js::CallTracer	js/src/gc/Marking.cpp:1323
3	xul.dll	XPCWrappedNativeScope::TraceSelf	js/xpconnect/src/xpcprivate.h:1643
4	xul.dll	XPCWrappedNativeProto::TraceInside	js/xpconnect/src/xpcprivate.h:2458
5	xul.dll	XPC_WN_Shared_Proto_Trace	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1588
6	mozjs.dll	js::GCMarker::processMarkStackTop	js/src/gc/Marking.cpp:1214
7	mozjs.dll	js::GCMarker::drainMarkStack	js/src/gc/Marking.cpp:1258
8	mozjs.dll	IncrementalCollectSlice	js/src/jsgc.cpp:4194
9	mozjs.dll	GCCycle	js/src/jsgc.cpp:4399
10	mozjs.dll	Collect	js/src/jsgc.cpp:4507
11	mozjs.dll	js::GC	js/src/jsgc.cpp:4531
12	mozjs.dll	js::GCForReason	js/src/jsfriendapi.cpp:159
13	xul.dll	nsXPCComponents_Utils::ForceGC	js/xpconnect/src/XPCComponents.cpp:4040 

bp-be4a4096-1874-4083-bd79-b4d382130227  (startup crash)
0	mozjs.dll	js::gc::MarkInternal<js::ArgumentsObject>	js/src/gc/Marking.cpp:115
1	mozjs.dll	js::gc::MarkObject	js/src/gc/Marking.cpp:234
2	mozjs.dll	JSFunction::trace	js/src/jsfun.cpp:506
3	mozjs.dll	fun_trace	js/src/jsfun.cpp:513
4	mozjs.dll	js::GCMarker::processMarkStackTop	js/src/gc/Marking.cpp:1214
5	mozjs.dll	js::GCMarker::drainMarkStack	js/src/gc/Marking.cpp:1258
6	mozjs.dll	IncrementalCollectSlice	js/src/jsgc.cpp:4194
7	mozjs.dll	GCCycle	js/src/jsgc.cpp:4399
8	mozjs.dll	Collect	js/src/jsgc.cpp:4507
9	mozjs.dll	js::GC	js/src/jsgc.cpp:4531
10	mozjs.dll	js::GCForReason	js/src/jsfriendapi.cpp:159
11	xul.dll	nsXPConnect::Collect	js/xpconnect/src/nsXPConnect.cpp:380
12	xul.dll	nsCycleCollector::FixGrayBits	xpcom/base/nsCycleCollector.cpp:2667
13	xul.dll	nsCycleCollectorRunner::Collect	xpcom/base/nsCycleCollector.cpp:3145 

bp-d746bd98-b1b1-45dd-a70b-ab26e2120718 14.0 beta
bp-7bf776a6-f3a7-4eb2-8e08-5de922120528 14.0 aurora
bp-ac41c5ab-9a4c-400d-a4a9-9255d2120514 15.0a1 


Other possible signatures (as with bug 744175)
 js::gc::MarkInternal<JSObject>(JSTracer*, JSObject**)
js::gc::MarkInternal<JSObject>
It seems a little weird that MarkInternal<js::ArgumentsObject> is a top crash.  I'd have thought it isn't that common.  I'm not sure how actionable that is, though.
(In reply to Andrew McCreight [:mccr8] from comment #1)
> It seems a little weird that MarkInternal<js::ArgumentsObject> is a top
> crash.  I'd have thought it isn't that common.  I'm not sure how actionable
> that is, though.

Because bug 744175 cited several signatures, so I assumed they were related. MarkInternal<js::ArgumentsObject> by itself is not a topcrash. But as mentioned in sentence 1 the two signatures combined are topicrash - in this case cranking #13.
Thunderbird had a problem and crashed.

Unfortunately, the crash reporter is unable to submit a crash report.

Details: The application did not leave a crash dump file.

I tried to paste the console errors into the Mozilla Crash Reporter, but it will not respond to ctrl-v or middle-mouse click, unlike every other program!

crash report: https://crash-stats.mozilla.com/report/index/92cff4be-66f5-42e1-993d-2e1a52130207

Unable to load address book file abook-13.mab. It may be read-only, or locked by another application. Please try again later.

Thunderbird had a problem and crashed.

Unfortunately, the crash reporter is unable to submit a crash report.

Details: The application did not leave a crash dump file.

 Error opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is nullError opening stream:
[Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIFileOutputStream.init]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://testpilot/modules/log4moz.js :: FApp_openStream :: line 471"  data: no]Error writing file:
TypeError: this._fos is null
(thunderbird:5411): Gtk-WARNING **: Error loading theme icon 'dialog-warning' for stock: Error opening file: Too many open files
failed opening offline store for imap://user@imap.mycompany.com/INBOX
failed opening offline store for imap://user@imap.mycompany.com/INBOX
ExceptionHandler::GenerateDump                                        sys_pipe failed:Too many open files
aExceptionHandler::WaitForContinueSignal                                sys_read failed:Input/output error
With combined signatures, it's #25 crasher in TB 17.0.5.
Keywords: topcrash
Steve, when was your last crash?


(independent of Steve) the signatures previously cited do not exist in TB17.0.6.  I expect the signature morphed to js::gc::MarkInternal(JSTracer*, js::PropertyName**), #29 crash for TB17.0.6. 

bp-3f5c1268-4b98-4543-81cd-154022130516
0	mozjs.dll	js::gc::MarkInternal<js::PropertyName>	js/src/gc/Marking.cpp:115
1	mozjs.dll	js::gc::MarkString	js/src/gc/Marking.cpp:242
2	mozjs.dll	js::Bindings::trace	js/src/jsscript.cpp:243
3	mozjs.dll	JSScript::markChildren	js/src/jsscript.cpp:2457
4	mozjs.dll	js::gc::PushMarkStack	js/src/gc/Marking.cpp:588
5	mozjs.dll	js::gc::MarkInternal<JSScript>	js/src/gc/Marking.cpp:116
6	mozjs.dll	js::gc::MarkScriptRoot	js/src/gc/Marking.cpp:240
Crash Signature: [@ js::gc::MarkInternal<JSString>(JSTracer*, JSString**)] [@ js::gc::MarkInternal<js::ArgumentsObject>(JSTracer*, js::ArgumentsObject**) ] → [@ js::gc::MarkInternal<JSString>(JSTracer*, JSString**)] [@ js::gc::MarkInternal<js::ArgumentsObject>(JSTracer*, js::ArgumentsObject**) ] [@ js::gc::MarkInternal(JSTracer*, js::PropertyName**)]
Flags: needinfo?(steve)
(In reply to Fernando Hartmann from comment #6)
> This happened to me today
> https://crash-stats.mozilla.com/report/index/0d45ec3e-84fa-4329-b841-
> 9e5262130722

Do you have other crashes?
Flags: needinfo?(matafagafo)
(In reply to Wayne Mery (:wsmwk) from comment #7)
> (In reply to Fernando Hartmann from comment #6)
> > This happened to me today
> > https://crash-stats.mozilla.com/report/index/0d45ec3e-84fa-4329-b841-
> > 9e5262130722
> 
> Do you have other crashes?

No, only once.
Flags: needinfo?(matafagafo)
See Also: → 803460
Current versions have no crashes with this signature.
Status: NEW → RESOLVED
Closed: 8 years ago
Flags: needinfo?(steve)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.