Intermittent regress-336409-2.js | Exited with code -2147483645 during test run | application crashed [@ mozilla::RoundUpPow2(unsigned int)] (Assertion failure: ~x > x (can't round up -- will overflow!), at MathAlgorithms.h:422)

RESOLVED FIXED in Firefox 25

Status

()

Core
MFBT
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: RyanVM, Assigned: Waldo)

Tracking

({assertion, crash, intermittent-failure})

Trunk
mozilla25
x86
Windows 8
assertion, crash, intermittent-failure
Points:
---

Firefox Tracking Flags

(firefox24 unaffected, firefox25 fixed)

Details

(crash signature)

(Reporter)

Description

5 years ago
https://tbpl.mozilla.org/php/getParsedLog.php?id=25452629&tree=Mozilla-Inbound

WINNT 6.2 mozilla-inbound debug test jsreftest on 2013-07-18 14:13:55 PDT for push d7af6a55966c
slave: t-w864-ix-002

14:25:58     INFO -  REFTEST TEST-START | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js
14:25:58     INFO -  REFTEST TEST-LOAD | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | 2197 / 6592 (33%)
14:25:58     INFO -  ++DOMWINDOW == 251 (16F6A1A0) [serial = 4167] [outer = 08B04558]
14:25:58     INFO -  WARNING: No permission to access camera: file e:/builds/moz2_slave/m-in-w32-d-0000000000000000000/build/dom/camera/DOMCameraManager.cpp, line 84
14:25:58     INFO -  BUGNUMBER: 336409
14:25:58     INFO -  STATUS: Integer overflow in js_obj_toSource
14:25:58     INFO -  --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 ---
14:25:58     INFO -  --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 ---
14:25:58     INFO -  STATUS: Creating 128MB string
14:25:58     INFO -  STATUS: Done. length = 134217728
14:25:58     INFO -  STATUS: Creating object
14:25:58     INFO -  STATUS: object.toSource()
14:26:39     INFO -  Assertion failure: ~x > x (can't round up -- will overflow!), at e:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\obj-firefox\dist\include\mozilla/MathAlgorithms.h:422
14:26:40  WARNING -  TEST-UNEXPECTED-FAIL | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | Exited with code -2147483645 during test run
14:26:40     INFO -  INFO | automation.py | Application ran for: 0:08:57.256000
14:26:40     INFO -  INFO | zombiecheck | Reading PID log: c:\users\cltbld~1.t-w\appdata\local\temp\tmpg0xigtpidlog
14:26:47  WARNING -  PROCESS-CRASH | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | application crashed [@ mozilla::RoundUpPow2(unsigned int)]
14:26:47     INFO -  Crash dump filename: c:\users\cltbld~1.t-w\appdata\local\temp\tmpq2otr3\minidumps\7d21e2b2-ab26-457c-b72f-673be480dad1.dmp
14:26:47     INFO -  Operating system: Windows NT
14:26:47     INFO -                    6.2.9200
14:26:47     INFO -  CPU: x86
14:26:47     INFO -       GenuineIntel family 6 model 30 stepping 5
14:26:47     INFO -       8 CPUs
14:26:47     INFO -  Crash reason:  EXCEPTION_BREAKPOINT
14:26:47     INFO -  Crash address: 0x73d87e13
14:26:47     INFO -  Thread 0 (crashed)
14:26:47     INFO -   0  mozjs.dll!mozilla::RoundUpPow2(unsigned int) [MathAlgorithms.h:d7af6a55966c : 422 + 0x40]
14:26:47     INFO -      eip = 0x73d87e13   esp = 0x00a0df7c   ebp = 0x00a0df7c   ebx = 0x40000000
14:26:47     INFO -      esi = 0x74821440   edi = 0x80000000   eax = 0x00000000   ecx = 0xa58611a3
14:26:47     INFO -      edx = 0x7491e4d8   efl = 0x00000202
14:26:47     INFO -      Found by: given as instruction pointer in context
14:26:47     INFO -   1  mozjs.dll!mozilla::detail::VectorImpl<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy>,1>::growTo(mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> > &,unsigned int) [Vector.h:d7af6a55966c : 174 + 0xb]
14:26:47     INFO -      eip = 0x73e047fc   esp = 0x00a0df84   ebp = 0x00a0df94
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   2  mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::growStorageBy(unsigned int) [Vector.h:d7af6a55966c : 743 + 0x6]
14:26:47     INFO -      eip = 0x73e05426   esp = 0x00a0df9c   ebp = 0x00a0dfac
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   3  mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::append<wchar_t>(wchar_t const *,wchar_t const *) [Vector.h:d7af6a55966c : 971 + 0x16]
14:26:47     INFO -      eip = 0x73e254a1   esp = 0x00a0dfb4   ebp = 0x00a0dfd0
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   4  mozjs.dll!obj_toSource [Object.cpp:d7af6a55966c : 253 + 0x12]
14:26:47     INFO -      eip = 0x73e29e20   esp = 0x00a0dfd8   ebp = 0x00a0e1f4
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   5  mozjs.dll!js::CallJSNative(JSContext *,int (*)(JSContext *,unsigned int,JS::Value *),JS::CallArgs const &) [jscntxtinlines.h:d7af6a55966c : 225 + 0xe]
14:26:47     INFO -      eip = 0x73df2aaa   esp = 0x00a0e1fc   ebp = 0x00a0e220
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   6  mozjs.dll!js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) [Interpreter.cpp:d7af6a55966c : 477 + 0xf]
14:26:47     INFO -      eip = 0x73dfdb8b   esp = 0x00a0e228   ebp = 0x00a0e3ec
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   7  mozjs.dll!Interpret [Interpreter.cpp:d7af6a55966c : 2498 + 0x26]
14:26:47     INFO -      eip = 0x73e009fc   esp = 0x00a0e3f4   ebp = 0x00a0e888
14:26:47     INFO -      Found by: call frame info
14:26:47     INFO -   8  mozjs.dll!js::RunScript(JSContext *,js::RunState &) [Interpreter.cpp:d7af6a55966c : 434 + 0x6]
14:26:47     INFO -      eip = 0x73df64c6   esp = 0x00a0e890   ebp = 0x00a0e8b0
14:26:47     INFO -      Found by: call frame info

Updated

5 years ago
Crash Signature: [@ mozilla::RoundUpPow2(unsigned int)]
(Reporter)

Updated

5 years ago
See Also: → bug 895792
Comment hidden (Treeherder Robot)
Comment hidden (Treeherder Robot)
Comment hidden (Treeherder Robot)
Comment hidden (Treeherder Robot)
Comment hidden (Treeherder Robot)
(Reporter)

Comment 6

5 years ago
Waldo, can you take a look at this please?
Flags: needinfo?(jwalden+bmo)
Comment hidden (Treeherder Robot)
It's a bad assertion, no untoward consequences, bug 895792 has a patch.
Flags: needinfo?(jwalden+bmo)
Assignee: general → nobody
Component: JavaScript Engine → MFBT
Comment hidden (Treeherder Robot)
Should have been fixed by bug 895792.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED

Updated

4 years ago
Depends on: 895792
Target Milestone: --- → mozilla25
(Reporter)

Updated

4 years ago
Assignee: nobody → jwalden+bmo
status-firefox24: --- → unaffected
status-firefox25: --- → fixed
You need to log in before you can comment on or make changes to this bug.