Closed Bug 893376 Opened 12 years ago Closed 12 years ago

Intermittent PROCESS-CRASH | /tests/docshell/test/navigation/test_reserved.html | application crashed [@ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&)]

Categories

(Core :: JavaScript Engine, defect)

ARM
Android
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 894251

People

(Reporter: cbook, Unassigned)

References

()

Details

(Keywords: crash)

Crash Data

https://tbpl.mozilla.org/php/getParsedLog.php?id=25262868&tree=Mozilla-Inbound Android Tegra 250 mozilla-inbound opt test mochitest-3 on 2013-07-13 07:54:01 PDT for push d520aeaf2e2c slave: tegra-216 PROCESS-CRASH | /tests/docshell/test/navigation/test_reserved.html | application crashed [@ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&)] CPU: arm 2 CPUs Crash reason: SIGSEGV Crash address: 0x4e345c2 Thread 35 (crashed) 0 libxul.so!js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&) [IonCode.h:d520aeaf2e2c : 117 + 0x0] r4 = 0x500057ca r5 = 0x500057ca r6 = 0x5dd16144 r7 = 0x567840c4 r8 = 0x63d1dfd8 r9 = 0x012fff10 r10 = 0x500057ca fp = 0x5dd16200 sp = 0x629ffb60 lr = 0x562a1201 pc = 0x562a130a Found by: given as instruction pointer in context 1 libxul.so!js::ion::IonCode::trace(JSTracer*) [Ion.cpp:d520aeaf2e2c : 481 + 0x3] r4 = 0x63d1dfd8 r5 = 0x5dd16144 r6 = 0x50005710 r7 = 0x00000002 r8 = 0x629ffc90 r9 = 0x5dd16144 r10 = 0x5dd16000 fp = 0x5dd16200 sp = 0x629ffb88 pc = 0x56240613 Found by: call frame info 2 libxul.so!js::GCMarker::processMarkStackOther(js::SliceBudget&, unsigned int, unsigned int) [Marking.cpp:d520aeaf2e2c : 1164 + 0x7] r4 = 0x63d1dfd8 r5 = 0x56945fc8 r6 = 0x5ee66a2c r7 = 0x00000001 r8 = 0x629ffc90 r9 = 0x5dd16144 r10 = 0x5dd16000 fp = 0x5dd16200 sp = 0x629ffba8 pc = 0x5610b9ff Found by: call frame info 3 libxul.so!js::GCMarker::drainMarkStack(js::SliceBudget&) [Marking.cpp:d520aeaf2e2c : 1402 + 0x7] r4 = 0x5f8248bc r5 = 0x5dd16144 r6 = 0x5ee66a2c r7 = 0x00000001 r8 = 0x5ee66a2c r9 = 0x629ffc90 r10 = 0x5dd16000 fp = 0x5dd16200 sp = 0x629ffbf8 pc = 0x5610bd5b Found by: call frame info 4 libxul.so!IncrementalCollectSlice [jsgc.cpp:d520aeaf2e2c : 3783 + 0x7] r4 = 0x5f8248bc r5 = 0x00000001 r6 = 0x5ee66a2c r7 = 0x629ffc90 r8 = 0x5ee66a2c r9 = 0x5f8248bc r10 = 0x5dd16000 fp = 0x5dd16200 sp = 0x629ffc28 pc = 0x56194a5d Found by: call frame info 5 libxul.so!GCCycle [jsgc.cpp:d520aeaf2e2c : 4426 + 0x11] r4 = 0x00000000 r5 = 0x00000000 r6 = 0x5dd16000 r7 = 0x5677ad30 r8 = 0x00000003 r9 = 0x5dd16200 r10 = 0x00000000 fp = 0x00000000 sp = 0x629ffd20 pc = 0x56195c97
btw same as bug 846150 ?
Depends on: 871290
Crash Signature: @ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&) → @ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&)]
Crash Signature: @ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&)] → [@ js::ion::Assembler::TraceJumpRelocations(JSTracer*, js::ion::IonCode*, js::ion::CompactBufferReader&) ]
Status: NEW → RESOLVED
Closed: 12 years ago
No longer depends on: 871290
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.