Closed Bug 935675 Opened 12 years ago Closed 12 years ago

Crash (100% repro) in nightly sending Yahoo e-mail from the browser client

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 935491

People

(Reporter: milan, Unassigned)

Details

100% reproducible for me, started happening in the last day or so (I'll try to do mozregression). OS X, 10.8. It could be that the site changed, of course. Guessing the component. STR: 1. Open Yahoo e-mail in the browser, go to a message. 2. Reply 3. Send (it sends) 4. Crashes. #0 0x00000001268f4e30 in ?? () #1 0x00000001007eef43 in ?? () #2 0x0000000103e03289 in EnterBaseline (cx=0x10b3904c0, data=@0x12b7697e0) at /Users/msreckovic/Repos/mozilla-central/js/src/jit/BaselineJIT.cpp:122 #3 0x0000000103e02f9d in js::jit::EnterBaselineMethod (cx=0x10f9910c0, state=@0x7fff5fbf9160) at /Users/msreckovic/Repos/mozilla-central/js/src/jit/BaselineJIT.cpp:153 #4 0x0000000103c9f3a4 in Interpret (cx=<value temporarily unavailable, due to optimizations>, state=@0x7fff5fbf9d38) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:2540 #5 0x0000000103c9659d in js::RunScript (cx=0x10f9910c0, state=@0x7fff5fbf9d38) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:420 #6 0x0000000103ca4717 in js::Invoke (cx=0x10f9910c0, args={<JS::detail::CallArgsBase<0>> = {<JS::CallReceiver> = {<JS::detail::CallReceiverBase<0>> = {<JS::detail::UsedRvalBase<IncludeUsedRval>> = {usedRval_ = false}, argv_ = 0x7fff5fbf9ef0}, <No data fields>}, argc_ = 3}, <No data fields>}, construct=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:482 #7 0x0000000103b61585 in js_fun_call (cx=0x10f9910c0, argc=<value temporarily unavailable, due to optimizations>, vp=0x10b6163d0) at /Users/msreckovic/Repos/mozilla-central/js/src/jsfun.cpp:892 #8 0x0000000103caa851 in js::CallJSNative (cx=0x10f9910c0, native=0x103b61360 <js_fun_call(JSContext*, unsigned int, JS::Value*)>, args=@0x7fff5fbfa4d0) at jscntxtinlines.h:220 #9 0x0000000103ca4704 in js::Invoke (cx=0x10f9910c0, args={<JS::detail::CallArgsBase<0>> = {<JS::CallReceiver> = {<JS::detail::CallReceiverBase<0>> = {<JS::detail::UsedRvalBase<IncludeUsedRval>> = {usedRval_ = false}, argv_ = 0x10b6163e0}, <No data fields>}, argc_ = 4}, <No data fields>}, construct=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:456 #10 0x0000000103c9f040 in Interpret (cx=0x10f9910c0, state=@0x7fff5fbfb238) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:2502 #11 0x0000000103c9659d in js::RunScript (cx=0x10f9910c0, state=@0x7fff5fbfb238) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:420 #12 0x0000000103ca4717 in js::Invoke (cx=0x10f9910c0, args={<JS::detail::CallArgsBase<0>> = {<JS::CallReceiver> = {<JS::detail::CallReceiverBase<0>> = {<JS::detail::UsedRvalBase<IncludeUsedRval>> = {usedRval_ = false}, argv_ = 0x7fff5fbfb3f0}, <No data fields>}, argc_ = 3}, <No data fields>}, construct=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:482 #13 0x0000000103b61585 in js_fun_call (cx=0x10f9910c0, argc=<value temporarily unavailable, due to optimizations>, vp=0x10b6162e0) at /Users/msreckovic/Repos/mozilla-central/js/src/jsfun.cpp:892 #14 0x0000000103caa851 in js::CallJSNative (cx=0x10f9910c0, native=0x103b61360 <js_fun_call(JSContext*, unsigned int, JS::Value*)>, args=@0x7fff5fbfb9d0) at jscntxtinlines.h:220 #15 0x0000000103ca4704 in js::Invoke (cx=0x10f9910c0, args={<JS::detail::CallArgsBase<0>> = {<JS::CallReceiver> = {<JS::detail::CallReceiverBase<0>> = {<JS::detail::UsedRvalBase<IncludeUsedRval>> = {usedRval_ = false}, argv_ = 0x10b6162f0}, <No data fields>}, argc_ = 4}, <No data fields>}, construct=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:456 #16 0x0000000103c9f040 in Interpret (cx=0x10f9910c0, state=@0x7fff5fbfc738) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:2502 #17 0x0000000103c9659d in js::RunScript (cx=0x10f9910c0, state=@0x7fff5fbfc738) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:420 #18 0x0000000103ca4717 in js::Invoke (cx=0x10f9910c0, args={<JS::detail::CallArgsBase<0>> = {<JS::CallReceiver> = {<JS::detail::CallReceiverBase<0>> = {<JS::detail::UsedRvalBase<IncludeUsedRval>> = {usedRval_ = false}, argv_ = 0x7fff5fbfc910}, <No data fields>}, argc_ = 1}, <No data fields>}, construct=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:482 #19 0x0000000103ca4db3 in js::Invoke (cx=0x10f9910c0, thisv=<value temporarily unavailable, due to optimizations>, fval=<value temporarily unavailable, due to optimizations>, argc=<value temporarily unavailable, due to optimizations>, argv=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/js/src/vm/Interpreter.cpp:513 #20 0x0000000103b0d87e in JS_CallFunctionValue (cx=0x10f9910c0, objArg=<value temporarily unavailable, due to optimizations>, fval={data = {asBits = 18445477441367497408, debugView = {payload47 = 5053143744, tag = JSVAL_TAG_OBJECT}, s = {payload = {i32 = 758176448, u32 = 758176448, why = 758176448}}, asDouble = -nan(0xb80012d30dac0), asPtr = 0xfffb80012d30dac0, asWord = 18445477441367497408, asUIntPtr = 18445477441367497408}}, argc=1, argv=0x7fff5fbfcad8, rval=0x7fff5fbfcb38) at /Users/msreckovic/Repos/mozilla-central/js/src/jsapi.cpp:4906 #21 0x0000000102df39b8 in mozilla::dom::EventHandlerNonNull::Call (this=<value temporarily unavailable, due to optimizations>, cx=0x10f9910c0, event=@0x130953c40, aRv=@0x7fff5fbfccc0) at EventHandlerBinding.cpp:36 #22 0x000000010221167c in mozilla::dom::EventHandlerNonNull::Call<nsISupports*> (this=0x12e9b2940, thisObj=<value temporarily unavailable, due to optimizations>, event=@0x130953c40, aRv=@0x7fff5fbfccc0, aExceptionHandling=<value temporarily unavailable, due to optimizations>) at EventHandlerBinding.h:58 #23 0x0000000102210795 in mozilla::ErrorResult::Failed () at /Users/msreckovic/Repos/mozilla-central/obj-x86_64-apple-darwin12.5.0/dist/include/mozilla/ErrorResult.h:245 #24 0x0000000102210795 in nsJSEventListener::HandleEvent (this=0x12e73efc0, aEvent=0x130953c40) at /Users/msreckovic/Repos/mozilla-central/dom/src/events/nsJSEventListener.cpp:246 #25 0x0000000101e517cf in nsEventListenerManager::HandleEventSubType (this=0x12e129b00, aListenerStruct=<value temporarily unavailable, due to optimizations>, aListener=<value temporarily unavailable, due to optimizations>, aDOMEvent=0x130953c40, aCurrentTarget=0x12e77c800, aPusher=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/content/events/src/nsEventListenerManager.cpp:960 #26 0x0000000101e51b7b in nsEventListenerManager::HandleEventInternal (this=0x12e129b00, aPresContext=0x0, aEvent=0x130953ca0, aDOMEvent=0x7fff5fbfd0f0, aCurrentTarget=0x12e77c800, aEventStatus=0x7fff5fbfd0f8) at /Users/msreckovic/Repos/mozilla-central/content/events/src/nsEventListenerManager.cpp:1038 #27 0x0000000101e4d94d in nsEventTargetChainItem::HandleEvent (this=<value temporarily unavailable, due to optimizations>, aVisitor=@0x7fff5fbfd0e0, aCd=<value temporarily unavailable, due to optimizations>, aPusher=0x7fff5fbfd090) at nsEventListenerManager.h:325 #28 0x0000000101e4b00f in nsEventTargetChainItem::HandleEventTargetChain (aChain=@0x7fff5fbfd160, aVisitor=@0x7fff5fbfd0e0, aCallback=0x0, aCd=@0x7fff5fbfd168, aPusher=0x7fff5fbfd090) at /Users/msreckovic/Repos/mozilla-central/content/events/src/nsEventDispatcher.cpp:292 #29 0x0000000101e4c576 in nsEventDispatcher::Dispatch (aTarget=<value temporarily unavailable, due to optimizations>, aPresContext=0x0, aEvent=0x130953ca0, aDOMEvent=0x130953c40, aEventStatus=0x0, aCallback=0x0, aTargets=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/content/events/src/nsEventDispatcher.cpp:605 #30 0x0000000101e4cba9 in nsEventDispatcher::DispatchDOMEvent (aTarget=0x12e77c800, aEvent=<value temporarily unavailable, due to optimizations>, aDOMEvent=<value temporarily unavailable, due to optimizations>, aPresContext=0x0, aEventStatus=0x0) at /Users/msreckovic/Repos/mozilla-central/content/events/src/nsEventDispatcher.cpp:675 #31 0x0000000101da38bf in nsCOMPtr<nsIDOMEvent>::~nsCOMPtr () at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsXMLHttpRequest.cpp:3286 #32 0x0000000101da38bf in nsCOMPtr<nsIDOMEvent>::~nsCOMPtr () at /Users/msreckovic/Repos/mozilla-central/obj-x86_64-apple-darwin12.5.0/dist/include/nsCOMPtr.h:511 #33 0x0000000101da38bf in nsXMLHttpRequest::ChangeState (this=<value temporarily unavailable, due to optimizations>, aState=<value temporarily unavailable, due to optimizations>, aBroadcast=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsXMLHttpRequest.cpp:3287 #34 0x0000000101da80a8 in nsCOMPtr<nsITimer>::get () at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsXMLHttpRequest.cpp:2202 #35 0x0000000101da80a8 in nsCOMPtr<nsITimer>::operator nsITimer* () at /Users/msreckovic/Repos/mozilla-central/obj-x86_64-apple-darwin12.5.0/dist/include/nsCOMPtr.h:813 #36 0x0000000101da80a8 in nsXMLHttpRequest::ChangeStateToDone (this=0x12e77c800) at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsXMLHttpRequest.cpp:2203 #37 0x0000000101da7d72 in nsXMLHttpRequest::OnStopRequest (this=0x12e77c800, request=0x12d4a9058, ctxt=<value temporarily unavailable, due to optimizations>, status=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsXMLHttpRequest.cpp:2189 #38 0x0000000101cb9acc in nsCORSListenerProxy::OnStopRequest (this=0x12514a8b0, aRequest=0x12d4a9058, aContext=0x0, aStatusCode=NS_OK) at /Users/msreckovic/Repos/mozilla-central/content/base/src/nsCrossSiteListenerProxy.cpp:577 #39 0x0000000101717e04 in mozilla::net::nsHttpChannel::OnStopRequest (this=0x12d4a9000, request=<value temporarily unavailable, due to optimizations>, ctxt=0x130953c40, status=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/netwerk/protocol/http/nsHttpChannel.cpp:5165 #40 0x00000001015f25aa in nsInputStreamPump::OnStateStop (this=0x12dfe0190) at /Users/msreckovic/Repos/mozilla-central/netwerk/base/src/nsInputStreamPump.cpp:702 #41 0x00000001015f1bd0 in nsInputStreamPump::OnInputStreamReady (this=0x12dfe0190, stream=0x0) at /Users/msreckovic/Repos/mozilla-central/netwerk/base/src/nsInputStreamPump.cpp:437 #42 0x0000000103206209 in nsCOMPtr<nsIInputStreamCallback>::assign_assuming_AddRef () at /Users/msreckovic/Repos/mozilla-central/xpcom/io/nsStreamUtils.cpp:85 #43 0x0000000103206209 in nsCOMPtr<nsIInputStreamCallback>::assign_with_AddRef () at /Users/msreckovic/Repos/mozilla-central/obj-x86_64-apple-darwin12.5.0/dist/include/nsCOMPtr.h:1191 #44 0x0000000103206209 in nsCOMPtr<nsIInputStreamCallback>::operator= () at /Users/msreckovic/Repos/mozilla-central/obj-x86_64-apple-darwin12.5.0/dist/include/nsCOMPtr.h:656 #45 0x0000000103206209 in nsInputStreamReadyEvent::Run (this=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/xpcom/io/nsStreamUtils.cpp:86 #46 0x000000010321ff6f in nsThread::ProcessNextEvent (this=0x100525900, mayWait=<value temporarily unavailable, due to optimizations>, result=0x7fff5fbfd5e7) at /Users/msreckovic/Repos/mozilla-central/xpcom/threads/nsThread.cpp:622 #47 0x00000001031bfbfb in NS_ProcessPendingEvents (thread=<value temporarily unavailable, due to optimizations>, timeout=20) at nsThreadUtils.cpp:201 #48 0x0000000102a05d9a in nsBaseAppShell::NativeEventCallback (this=0x108deb060) at /Users/msreckovic/Repos/mozilla-central/widget/xpwidgets/nsBaseAppShell.cpp:95 #49 0x000000010298e15f in nsAppShell::ProcessGeckoEvents (aInfo=0x108deb060) at /Users/msreckovic/Repos/mozilla-central/widget/cocoa/nsAppShell.mm:388 #50 0x00007fff8ade7b31 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ () #51 0x00007fff8ade7455 in __CFRunLoopDoSources0 () #52 0x00007fff8ae0a7f5 in __CFRunLoopRun () #53 0x00007fff8ae0a0e2 in CFRunLoopRunSpecific () #54 0x00007fff8c8a6eb4 in RunCurrentEventLoopInMode () #55 0x00007fff8c8a6c52 in ReceiveNextEventCommon () #56 0x00007fff8c8a6ae3 in BlockUntilNextEventMatchingListInMode () #57 0x00007fff8e6bd533 in _DPSNextEvent () #58 0x00007fff8e6bcdf2 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] () #59 0x000000010298d1d6 in -[GeckoNSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] (self=0x100502fb0, _cmd=<value temporarily unavailable, due to optimizations>, mask=18446744073709551615, expiration=0x422d63c37f00000d, mode=0x7fff7594f1c0, flag=1 '\001') at /Users/msreckovic/Repos/mozilla-central/widget/cocoa/nsAppShell.mm:165 #60 0x00007fff8e6b41a3 in -[NSApplication run] () #61 0x000000010298e79e in nsAppShell::Run (this=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/widget/cocoa/nsAppShell.mm:742 #62 0x0000000102740242 in nsAppStartup::Run (this=0x108d95790) at /Users/msreckovic/Repos/mozilla-central/toolkit/components/startup/nsAppStartup.cpp:267 #63 0x00000001014f129c in XREMain::XRE_mainRun (this=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/toolkit/xre/nsAppRunner.cpp:3976 #64 0x00000001014f18b5 in XREMain::XRE_main (this=0x7fff5fbff0e0, argc=<value temporarily unavailable, due to optimizations>, argv=<value temporarily unavailable, due to optimizations>, aAppData=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/toolkit/xre/nsAppRunner.cpp:4044 #65 0x00000001014f1c66 in XRE_main (argc=0, argv=0xffffffffffffffff, aAppData=0x422d63c37f00000d, aFlags=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/toolkit/xre/nsAppRunner.cpp:4246 #66 0x00000001000022f9 in main (argc=1, argv=<value temporarily unavailable, due to optimizations>) at /Users/msreckovic/Repos/mozilla-central/browser/app/nsBrowserApp.cpp:275
Regression range suggests it started yesterday instead. http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=2013-11-04&enddate=2013-11-05
Summary: Crash in nightly sending Yahoo e-mail from the browser client → Crash (100% repro) in nightly sending Yahoo e-mail from the browser client
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.