934417 - GenerationalGC: jsreftest crash in ecma_6/TypedObject/arraytype.js

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Jon Coppeard (:jonco)]

From a GGC browser build, on MacOSX 10.8 only:

15:58:11  WARNING -  TEST-UNEXPECTED-FAIL | file:///builds/slave/talos-slave/test/build/tests/jsreftest/tests/jsreftest.html?test=ecma_6/TypedObject/arraytype.js | Exited with code 1 during test run
15:58:11     INFO -  INFO | automation.py | Application ran for: 0:05:35.551485
15:58:11     INFO -  INFO | zombiecheck | Reading PID log: /var/folders/gz/qh20vy1976xgt8rq8khldpz800000w/T/tmpV8FZSRpidlog
15:58:25  WARNING -  PROCESS-CRASH | file:///builds/slave/talos-slave/test/build/tests/jsreftest/tests/jsreftest.html?test=ecma_6/TypedObject/arraytype.js | application crashed [@ (anonymous namespace)::CompilerConstraintInstance<(anonymous namespace)::ConstraintDataFreeze>::generateTypeConstraint(JSContext*, js::types::RecompileInfo)]
15:58:25     INFO -  Crash dump filename: /var/folders/gz/qh20vy1976xgt8rq8khldpz800000w/T/tmpG2CTaK.mozrunner/minidumps/6257DA42-59EE-4BF9-9CA0-5ACE099D58F7.dmp
15:58:25     INFO -  Operating system: Mac OS X
15:58:25     INFO -                    10.8.0 12A269
15:58:25     INFO -  CPU: amd64
15:58:25     INFO -       family 6 model 42 stepping 7
15:58:25     INFO -       8 CPUs
15:58:25     INFO -  Crash reason:  EXC_BAD_ACCESS / 0x0000000d
15:58:25     INFO -  Crash address: 0x0
15:58:25     INFO -  Thread 0 (crashed)
15:58:25     INFO -   0  XUL!(anonymous namespace)::CompilerConstraintInstance<(anonymous namespace)::ConstraintDataFreeze>::generateTypeConstraint(JSContext*, js::types::RecompileInfo) [Barrier.h:64651a1a79ca : 309 + 0x0]
15:58:25     INFO -      rbx = 0x0000000000000047   r12 = 0x000000010884cf50
15:58:25     INFO -      r13 = 0x0000000108810ac8   r14 = 0x0000000000000002
15:58:25     INFO -      r15 = 0x000000011b93ab70   rip = 0x00000001037308bf
15:58:25     INFO -      rsp = 0x00007fff5fbfac60   rbp = 0x00007fff5fbfac80
15:58:25     INFO -      Found by: given as instruction pointer in context
15:58:25     INFO -   1  XUL!js::types::FinishCompilation(JSContext*, JS::Handle<JSScript*>, js::ExecutionMode, js::types::CompilerConstraintList*, js::types::RecompileInfo*) [jsinfer.cpp:64651a1a79ca : 954 + 0xd]
15:58:25     INFO -      rbx = 0x0000000000000047   r12 = 0x000000011b93ab01
15:58:25     INFO -      r13 = 0x0000000108810ac8   r14 = 0x000000011b93ab70
15:58:25     INFO -      r15 = 0x0000000108810a01   rip = 0x00000001037224da
15:58:25     INFO -      rsp = 0x00007fff5fbfac90   rbp = 0x00007fff5fbfad00
15:58:25     INFO -      Found by: call frame info
15:58:25     INFO -   2  XUL!js::jit::CodeGenerator::link(JSContext*, js::types::CompilerConstraintList*) [CodeGenerator.cpp:64651a1a79ca : 5732 + 0xc]
15:58:25     INFO -      rbx = 0x0000000000000000   r12 = 0x000000011b93ab70
15:58:25     INFO -      r13 = 0x0000000108810b48   r14 = 0x0000000107176800
15:58:25     INFO -      r15 = 0x0000000108810ac8   rip = 0x00000001039c9e72
15:58:25     INFO -      rsp = 0x00007fff5fbfad10   rbp = 0x00007fff5fbfae60
15:58:25     INFO -      Found by: call frame info
15:58:25     INFO -   3  XUL!js::jit::AttachFinishedCompilations(JSContext*) [Ion.cpp:64651a1a79ca : 1517 + 0xe]
15:58:25     INFO -      rbx = 0x00007fff5fbfaeb0   r12 = 0x0000000108810b48
15:58:25     INFO -      r13 = 0x0000000108810b48   r14 = 0x0000000107176800
15:58:25     INFO -      r15 = 0x0000000109003800   rip = 0x00000001039eae3b
15:58:25     INFO -      rsp = 0x00007fff5fbfae70   rbp = 0x00007fff5fbfafa0
15:58:25     INFO -      Found by: call frame info
15:58:25     INFO -   4  XUL!js_InvokeOperationCallback(JSContext*) [jscntxt.cpp:64651a1a79ca : 1022 + 0x7]
15:58:25     INFO -      rbx = 0x0000000109003800   r12 = 0x0000000000000008
15:58:25     INFO -      r13 = 0x00007fff5fbfb978   r14 = 0x000000011b93ab70
15:58:25     INFO -      r15 = 0x000000011b93ab70   rip = 0x00000001036ce56f
15:58:25     INFO -      rsp = 0x00007fff5fbfafb0   rbp = 0x00007fff5fbfafc0
15:58:25     INFO -      Found by: call frame info

Comment 1

[Jon Coppeard (:jonco)]

This has stopped happening in recent try runs.