883560 - crash in XPCJSStackFrame::CreateStack @ js::PCToLineNumber

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect)

Description

[Scoobidiver (away)]

It's #6 crasher in today's build.
It first showed up in 24.0a1/201306015. The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=b197bed90a98&tochange=3d16d59c9317

Signature 	js::PCToLineNumber(unsigned int, unsigned char*, unsigned char*, unsigned char*, unsigned int*) More Reports Search
UUID	5fa13ab2-648e-4254-97b2-b54d92130615
Date Processed	2013-06-15 19:54:37
Uptime	102
Last Crash	2.5 hours before submission
Install Age	2.5 hours since version was first installed.
Install Time	2013-06-15 17:26:00
Product	Firefox
Version	24.0a1
Build ID	20130615031212
Release Channel	nightly
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	GenuineIntel family 6 model 23 stepping 10
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x2e542740
App Notes 	
AdapterVendorID: 0x8086, AdapterDeviceID: 0x2a42, AdapterSubsysID: 02961025, AdapterDriverVersion: 8.15.10.2869
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
Processor Notes 	sp-processor04_phx1_mozilla_com_28648:2012
EMCheckCompatibility	True
Adapter Vendor ID	0x8086
Adapter Device ID	0x2a42
Total Virtual Memory	4294836224
Available Virtual Memory	3802247168
System Memory Use Percentage	58
Available Page File	5718233088
Available Physical Memory	1739239424

Frame 	Module 	Signature 	Source
0 	mozjs.dll 	js::PCToLineNumber 	js/src/jsscript.cpp:2132
1 	mozjs.dll 	JS::DescribeStack 	js/src/jsdbgapi.cpp:973
2 	xul.dll 	XPCJSStackFrame::CreateStack 	js/xpconnect/src/XPCStack.cpp:100
3 	xul.dll 	nsXPConnect::GetCurrentJSStack 	js/xpconnect/src/nsXPConnect.cpp:1409
4 	xul.dll 	nsXPCException::NewException 	js/xpconnect/src/XPCException.cpp:402
5 	xul.dll 	XPCThrower::BuildAndThrowException 	js/xpconnect/src/XPCThrower.cpp:182
6 	xul.dll 	XPCThrower::Throw 	js/xpconnect/src/XPCThrower.cpp:24
7 	xul.dll 	xpc::Throw 	js/xpconnect/src/XPCThrower.cpp:32
8 	xul.dll 	mozilla::dom::Throw<1> 	obj-firefox/dist/include/mozilla/dom/BindingUtils.h:71
9 	xul.dll 	mozilla::dom::ThrowMethodFailedWithDetails<1> 	obj-firefox/dist/include/mozilla/dom/BindingUtils.h:94
10 	xul.dll 	mozilla::dom::DocumentBinding::querySelectorAll 	obj-firefox/dom/bindings/DocumentBinding.cpp:2817
11 	xul.dll 	mozilla::dom::DocumentBinding::genericMethod 	obj-firefox/dom/bindings/DocumentBinding.cpp:7308
12 	mozjs.dll 	js::Invoke 	js/src/vm/Interpreter.cpp:391
13 	mozjs.dll 	Interpret 	js/src/vm/Interpreter.cpp:2195
14 	mozjs.dll 	js::RunScript 	js/src/vm/Interpreter.cpp:328
15 	mozjs.dll 	js::Invoke 	js/src/vm/Interpreter.cpp:437
16 	mozjs.dll 	js::ion::DoCallFallback 	js/src/ion/BaselineIC.cpp:6997
17 		@0xdaf0380 	

More reports at:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3APCToLineNumber%28unsigned+int%2C+unsigned+char*%2C+unsigned+char*%2C+unsigned+char*%2C+unsigned+int*%29

Comment 1

[Alice0775 White]

bp-5f8eb002-b229-4941-8dac-bd82f2130616
STR
1. Open URL
2. Wait about 10 seconds after page loading completed

Actual Results
Crashes

Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/18c1fd169792
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614031707
Crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/ce43d28276e4
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614045911
Pushlog
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=18c1fd169792&tochange=ce43d28276e4

Suspected: Bug 678037

Comment 2

[Brian Hackett [Laid off!]]

I think this will be fixed by the patch in bug 883630, which I'll land later this morning.

Comment 3

[Scoobidiver (away)]

(In reply to Brian Hackett (:bhackett) from comment #2)
> I think this will be fixed by the patch in bug 883630, which I'll land later
> this morning.
It seems so based on STR and crash stats: no crashes in 24.0a1/20130617.

Comment 4

[Paul Silaghi, QA [:pauly]]

Reproduced Nightly 2013-06-16.
Verified fixed FF 24b8 Win 7