926518 - crash in PushMarkStack

Status: RESOLVED DUPLICATE of bug 719114

(Core :: JavaScript Engine, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-4115eb93-818d-4e43-884c-b406d2131013.
=============================================================
Crashing Thread
Frame 	Module 	Signature 	Source
0 	libxul.so 	PushMarkStack 	/home/geeksphone/FOS/peak/gecko/js/src/gc/Heap.h
1 	libxul.so 	PushMarkStack 	/home/geeksphone/FOS/peak/gecko/js/src/gc/Marking.cpp
2 	libxul.so 	js::GCMarker::drainMarkStack(js::SliceBudget&) 	/home/geeksphone/FOS/peak/gecko/js/src/gc/Marking.cpp
3 	libxul.so 	IncrementalCollectSlice 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp
4 	libxul.so 	GCCycle 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp
5 	libxul.so 	Collect 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp
6 	libxul.so 	js::GC 	/home/geeksphone/FOS/peak/gecko/js/src/jsgc.cpp
7 	libxul.so 	JS::ShrinkingGC(JSRuntime*, JS::gcreason::Reason) 	/home/geeksphone/FOS/peak/gecko/js/src/jsfriendapi.cpp
8 	libxul.so 	mozilla::dom::workers::WorkerPrivate::GarbageCollectInternal(JSContext*, bool, bool) 	/home/geeksphone/FOS/peak/gecko/dom/workers/WorkerPrivate.cpp
9 	libxul.so 	GarbageCollectRunnable::WorkerRun 	/home/geeksphone/FOS/peak/gecko/dom/workers/WorkerPrivate.cpp
10 	libxul.so 	mozilla::dom::workers::WorkerRunnable::Run() 	/home/geeksphone/FOS/peak/gecko/dom/workers/WorkerPrivate.cpp
11 	libxul.so 	mozilla::dom::workers::WorkerPrivate::DoRunLoop(JSContext*) 	/home/geeksphone/FOS/peak/gecko/dom/workers/WorkerPrivate.cpp
12 	libxul.so 	WorkerThreadRunnable::Run 	/home/geeksphone/FOS/peak/gecko/dom/workers/RuntimeService.cpp
13 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp
14 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	/home/geeksphone/FOS/peak/gecko/xpcom/glue/nsThreadUtils.cpp
15 	libxul.so 	nsThread::ThreadFunc(void*) 	/home/geeksphone/FOS/peak/gecko/xpcom/threads/nsThread.cpp
16 	libnss3.so 	_pt_root 	/home/geeksphone/FOS/peak/gecko/nsprpub/pr/src/pthreads/ptthread.c
17 	libc.so 	__thread_entry 	/home/geeksphone/FOS/keon_nightly/bionic/libc/bionic/pthread.c
18 	libc.so 	pthread_create 	/home/geeksphone/FOS/keon_nightly/bionic/libc/bionic/pthread.c

Crash in homescreen; More reports https://crash-stats.mozilla.com/report/list?product=B2G&signature=PushMarkStack

Comment 1

[Robert Kaiser]

This might be a lot like bug 719114 - but this is usually memory corruption so I wonder what could corrupt memory in B2G.