911156 - Unable to start Thunderbird ; crash in jemalloc with js::frontend::parser on the stack

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Jonathan Protzenko [:protz]]

This is 100% reproducible on my machine.
- Latest Thunderbird x86-64 nightly.
- This is caused by the Google Contacts addon.

Didn't happend with yesterday's nightly, disabling the addon fixes it.

I haven't investigated further. My crash, along with several others, is available at https://crash-stats.mozilla.com/report/index/67009bfd-a25a-4f69-b8e9-42e522130830

Thanks,

jonathan

Comment 1

[Wayne Mery (:wsmwk)]

The crashes https://crash-stats.mozilla.com/report/list?product=Thunderbird&signature=jemalloc_crash+|+arena_dalloc+|+js%3A%3Afrontend%3A%3ACompileError%3A%3A~CompileError%28%29 appear to be all you jonathan

Comment 2

[Jonathan Protzenko [:protz]]

Since I just got the nightly update, I assume other people will experience it soon... (I think?)

Comment 3

[Jonathan Kamens]

It's crashing for me as well. I also have Google Contacts installed.

Comment 4

[Jonathan Kamens]

I should mention that it's crashing for me on the trunk, not the 24 branch.

Comment 5

[Jonathan Protzenko [:protz]]

I'm running trunk as well, thanks for pointing that out.

Comment 6

[Jonathan Protzenko [:protz]]

There's been little activity, did I file this in the right component?

Comment 7

[Wayne Mery (:wsmwk)]

A couple others in crash-stats, all version 26.  Here's a firefox example bp-ff8f6646-c068-4b8d-930b-712572130909

0	libmozglue.dylib	jemalloc_crash	memory/mozjemalloc/jemalloc.c
1	libmozglue.dylib	arena_dalloc	memory/mozjemalloc/jemalloc.c
2	XUL	js::frontend::CompileError::~CompileError()	obj-firefox/x86_64/dist/include/js/Utility.h
3	XUL	mozilla::VectorBase<js::frontend::CompileError, 0ul, js::TempAllocPolicy, js::Vector<js::frontend::CompileError, 0ul, js::TempAllocPolicy> >::growStorageBy(unsigned long)	obj-firefox/x86_64/dist/include/mozilla/Vector.h
4	XUL	js::ExclusiveContext::addPendingCompileError()	obj-firefox/x86_64/dist/include/mozilla/Vector.h
5	XUL	js::frontend::TokenStream::reportCompileErrorNumberVA(unsigned int, unsigned int, unsigned int, __va_list_tag*)	js/src/frontend/TokenStream.cpp
6	XUL	js::frontend::Parser<js::frontend::FullParseHandler>::reportWithOffset(js::frontend::ParseReportKind, bool, unsigned int, unsigned int, ...)	js/src/frontend/Parser.cpp
7	XUL	js::frontend::Parser<js::frontend::FullParseHandler>::yieldExpression()	js/src/frontend/Parser.cpp
8	XUL	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr()	js/src/frontend/Parser.h
9	XUL	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr()	js/src/frontend/Parser.h
10	XUL	js::frontend::Parser<js::frontend::FullParseHandler>::expr()	js/src/frontend/Parser.h

Comment 8

[Wayne Mery (:wsmwk)]

protz,
Do you still see this crash?

No Thunderbird crashes since Aug 1
https://crash-stats.mozilla.com/search/?signature=~js%3A%3Afrontend%3A%3ACompileError%3A%3A~CompileError&date=%3E2015-08-01&_facets=signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=platform&_columns=email&_columns=user_comments#crash-reports

Comment 9

[Jonathan Protzenko [:protz]]

No I haven't seen this in a while.

Comment 10

[Wayne Mery (:wsmwk)]

cool. let's call it WFM then.