915625 - Intermittent PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, defect)

Description

[Ed Morley [:emorley]]

Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 00:25:52 PDT for push 5a4bb2092618

slave: talos-linux32-ix-042

https://tbpl.mozilla.org/php/getParsedLog.php?id=27752783&tree=Mozilla-Inbound

{
00:31:00     INFO -  Cycle 1(24): loaded http://localhost/page_load_test/tp5n/chinaz.com/chinaz.com/index.html (next: http://localhost/page_load_test/tp5n/cnn.com/www.cnn.com/index.html)
00:31:00     INFO -  RSS: Main: 156459008
00:31:00     INFO -  Cycle 1(25): loaded http://localhost/page_load_test/tp5n/chinaz.com/chinaz.com/index.html (next: http://localhost/page_load_test/tp5n/cnn.com/www.cnn.com/index.html)
00:31:00     INFO -  RSS: Main: 156459008
00:31:00     INFO -  Cycle 1(1): loaded http://localhost/page_load_test/tp5n/cnn.com/www.cnn.com/index.html (next: http://localhost/page_load_test/tp5n/dailymail.co.uk/www.dailymail.co.uk/ushome/index.html)
00:31:00     INFO -  RSS: Main: 151883776
00:31:00     INFO -  __FAILbrowser non-zero return code (2816)__FAIL
00:31:00     INFO -  DEBUG : Terminating: firefox, plugin-container, crashreporter
00:31:00     INFO -  mozcrash INFO | Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-linux/1378966718/firefox-26.0a1.en-US.linux-i686.crashreporter-symbols.zip
00:31:00     INFO -  INFO : Downloading symbols from: http://ftp.mozilla.org/pub/mozilla.org/firefox/tinderbox-builds/mozilla-inbound-linux/1378966718/firefox-26.0a1.en-US.linux-i686.crashreporter-symbols.zip
00:31:17     INFO -  	Screen width/height:1600/1200
00:31:17     INFO -  	colorDepth:24
00:31:17     INFO -  	Browser inner width/height: 1024/679
00:31:17     INFO -  browser_name:Firefox
00:31:17     INFO -  browser_version:26.0a1
00:31:17     INFO -  buildID:20130911231838
00:31:17     INFO -  PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
00:31:17     INFO -  Crash dump filename: /tmp/tmp52Cuab/profile/minidumps/07134910-1f42-6bf7-11744205-4489f4ca.dmp
00:31:17     INFO -  Operating system: Linux
00:31:17     INFO -                    0.0.0 Linux 3.2.0-38-generic-pae #61-Ubuntu SMP Tue Feb 19 12:39:51 UTC 2013 i686
00:31:17     INFO -  CPU: x86
00:31:17     INFO -       GenuineIntel family 6 model 30 stepping 5
00:31:17     INFO -       8 CPUs
00:31:17     INFO -  Crash reason:  SIGSEGV
00:31:17     INFO -  Crash address: 0x0
00:31:17     INFO -  Thread 0 (crashed)
00:31:17     INFO -   0  libxul.so!nsScriptLoader::GetScriptContext(JSObject**) [nsScriptLoader.cpp:5a4bb2092618 : 924 + 0x3]
00:31:17     INFO -      eip = 0xb436c751   esp = 0xbfa22be4   ebp = 0xbfa22c08   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f094740   edi = 0x8f094740   eax = 0x00000000   ecx = 0x00000000
00:31:17     INFO -      edx = 0xbfa22bfc   efl = 0x00010296
00:31:17     INFO -      Found by: given as instruction pointer in context
00:31:17     INFO -   1  libxul.so!nsScriptLoader::AttemptAsyncScriptParse(nsScriptLoadRequest*) [nsScriptLoader.cpp:5a4bb2092618 : 770 + 0xd]
00:31:17     INFO -      eip = 0xb436c828   esp = 0xbfa22c10   ebp = 0xbfa22ca8   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f094740   edi = 0x8f094740
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   2  libxul.so!nsScriptLoader::ProcessRequest(nsScriptLoadRequest*, void**) [nsScriptLoader.cpp:5a4bb2092618 : 807 + 0xa]
00:31:17     INFO -      eip = 0xb436cd14   esp = 0xbfa22cb0   ebp = 0xbfa22da8   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f094740   edi = 0x00000000
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   3  libxul.so!nsScriptLoader::ProcessPendingRequests() [nsScriptLoader.cpp:5a4bb2092618 : 1041 + 0xd]
00:31:17     INFO -      eip = 0xb436de08   esp = 0xbfa22db0   ebp = 0xbfa22de8   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f0031f0   edi = 0x00000000
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   4  libxul.so!nsScriptLoader::OnStreamComplete(nsIStreamLoader*, nsISupports*, tag_nsresult, unsigned int, unsigned char const*) [nsScriptLoader.cpp:5a4bb2092618 : 1250 + 0x8]
00:31:17     INFO -      eip = 0xb436e37d   esp = 0xbfa22df0   ebp = 0xbfa22e18   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f0031f0   edi = 0x00000000
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   5  libxul.so!nsStreamLoader::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) [nsStreamLoader.cpp:5a4bb2092618 : 101 + 0x14]
00:31:17     INFO -      eip = 0xb3f85904   esp = 0xbfa22e20   ebp = 0xbfa22e68   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f0172b0   edi = 0x8f0172c4
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   6  libxul.so!nsHTTPCompressConv::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) [nsHTTPCompressConv.cpp:5a4bb2092618 : 94 + 0x14]
00:31:17     INFO -      eip = 0xb3f9a573   esp = 0xbfa22e70   ebp = 0xbfa22e88   ebx = 0xb6e5d19c
00:31:17     INFO -      esi = 0x8f017b80   edi = 0x8f2fd120
00:31:17     INFO -      Found by: call frame info
00:31:17     INFO -   7  libxul.so!nsStreamListenerTee::OnStopRequest(nsIRequest*, nsISupports*, tag_nsresult) [nsStreamListenerTee.cpp:5a4bb2092618 : 53 + 0xe]
}

Comment 1

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=27768207&tree=Mozilla-Inbound
Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 07:16:54
revision: fbf06a627656
slave: talos-linux32-ix-009

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb730600DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 2

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=27768207&tree=Mozilla-Inbound
Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 07:16:54
revision: fbf06a627656
slave: talos-linux32-ix-009

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb730600DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 3

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=27770985&tree=Mozilla-Central
Ubuntu HW 12.04 mozilla-central talos tp5o on 2013-09-12 08:29:16
revision: 92bea49b46b4
slave: talos-linux32-ix-053

ImportError: No module named pygtk
PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb211f000 - 0xb231efff  locale-arcDEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 4

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=27773120&tree=Mozilla-Inbound
Ubuntu HW 12.04 x64 mozilla-inbound talos tp5o on 2013-09-12 09:09:10
revision: 96e921ddc1fd
slave: talos-linux64-ix-051

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0x7fd36d3ad0DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 5

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27779365&tree=Fx-Team
Ubuntu HW 12.04 fx-team talos tp5o on 2013-09-12 10:55:54
revision: 55b3a19125d0
slave: talos-linux32-ix-021

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb2daf000 - 0xb2db1fff  libgthread-2.0.so.0.3200.1  DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 6

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=27779365&tree=Fx-Team
Ubuntu HW 12.04 fx-team talos tp5o on 2013-09-12 10:55:54
revision: 55b3a19125d0
slave: talos-linux32-ix-021

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb2daf000 - 0xb2db1fff  libgthread-2.0.so.0.3200.1  DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 7

[Legacy TBPL/Treeherder Robot]

Gijs
https://tbpl.mozilla.org/php/getParsedLog.php?id=27778279&tree=UX
Windows 7 32-bit ux talos xperf on 2013-09-12 10:34:31
revision: a9e45ebd6683
slave: t-w732-ix-094

PROCESS-CRASH | tp5n | application crashed [@ nsScriptLoader::GetScriptContext(JSObject * *)]
0x74430000 - 0x74434fff  WSHTCPIDEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (-1073741819) [browser_output.txt]'
Return code: 2

Comment 8

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27789749&tree=Fx-Team
Ubuntu HW 12.04 fx-team talos tp5o on 2013-09-12 14:13:45
revision: a5bd86bfdef7
slave: talos-linux32-ix-012

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb2b87000 - 0DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 9

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Can we figure out what caused this and back it out?

Comment 10

[Ryan VanderMeulen [:RyanVM]]

Seems highly likely that this and bug 915882 are regressions from bug 906371, which already has other stuff landed on top of it.

Comment 11

[Brian Hackett [Laid off!]]

Attachment: potential patch

I think that at the point we call GetScriptContext while attempting an async parse, the proper checks haven't yet been done to ensure there is a window to execute on.

Comment 12

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27791243&tree=Mozilla-Inbound
Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 14:47:56
revision: 9fd3e98cf2f8
slave: talos-linux32-ix-023

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb7200000 - 0xbDEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 13

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27792053&tree=Mozilla-Inbound
Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 15:04:01
revision: e5e75d914d5b
slave: talos-linux32-ix-007

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 14

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27793275&tree=Mozilla-Inbound
Ubuntu HW 12.04 mozilla-inbound talos tp5o on 2013-09-12 15:29:43
revision: e375ecffbc98
slave: talos-linux32-ix-011

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
0xb2bDEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 15

[Legacy TBPL/Treeherder Robot]

KWierso
https://tbpl.mozilla.org/php/getParsedLog.php?id=27794330&tree=Fx-Team
Windows XP 32-bit fx-team talos tp5o on 2013-09-12 15:49:18
revision: 21b501262dda
slave: t-xp32-ix-054

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject * *)]
0x769c0000 - 0x76a73fff  userenv.dll  5.1DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (-1073741819) [browser_output.txt]'
Return code: 2

Comment 16

[Brian Hackett [Laid off!]]

Attachment: alternate

Actually, it's more likely that mDocument->GetInnerWindow() is returning NULL since the inner window has gone away (a check which happens in ProcessRequest but not AttemptAsyncScriptParse).

Comment 17

[Brian Hackett [Laid off!]]

Pushing ahead of review to see if the intermittent failures go away...

https://hg.mozilla.org/integration/mozilla-inbound/rev/e64327542d6b

Comment 18

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 804084 [details] [diff] [review]
alternate

Ah, yes.  That could do it.

I'd prefer we did the null-check in nsScriptLoader::AttemptAsyncScriptParse.

But yes, this seems pretty likely to be the problem.

Comment 19

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=27807949&tree=Fx-Team
Ubuntu HW 12.04 fx-team talos tp5o on 2013-09-12 21:00:53
revision: 54b8cfe36c02
slave: talos-linux32-ix-008

PROCESS-CRASH | tp5o | application crashed [@ nsScriptLoader::GetScriptContext(JSObject**)]
DEBUG : unknown error during cleanup: Traceback (most recent call last):
Traceback (most recent call last):
raise utils.talosError(message)
talosError: 'browser non-zero return code (2816) [browser_output.txt]'
Return code: 2

Comment 20

[Ed Morley [:emorley]]

https://hg.mozilla.org/mozilla-central/rev/e64327542d6b