939746 - crash in mozalloc_abort(char const* const) | NS_DebugBreak | js::AtomizeChars(js::ExclusiveContext*, wchar_t const*, unsigned __int64, js::InternBehavior)

Status: RESOLVED DUPLICATE of bug 937220

(Core :: JavaScript Engine, defect)

Description

[Tracy Walker [:tracy]]

This bug was filed from the Socorro interface and is 
report bp-039993ec-8207-492c-86df-4d81f2131118.
=============================================================

xpcom_runtime_abort(###!!! ABORT: cycle collector fault: file e:/builds/moz2_slave/m-cen-w64-ntly-000000000000000/build/xpcom/base/nsCycleCollector.cpp, line 1054)

This began crashing on 20131113. Appears to be amd64 only.

Socorro has it flagged as a startup crasher. However, a couple comments point to shut down crashes, as well. 

Frame 	Module 	Signature 	Source
0 	mozalloc.dll 	mozalloc_abort(char const * const) 	memory/mozalloc/mozalloc_abort.cpp
1 	xul.dll 	NS_DebugBreak 	xpcom/base/nsDebugImpl.cpp
2 	mozjs.dll 	js::AtomizeChars(js::ExclusiveContext *,wchar_t const *,unsigned __int64,js::InternBehavior) 	js/src/jsatom.cpp
3 	msvcr100.dll 	write_char 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\output.c
4 	msvcr100.dll 	output_l 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\output.c
5 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr() 	js/src/frontend/Parser.cpp
6 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::memberExpr(js::frontend::TokenKind,bool) 	js/src/frontend/Parser.cpp
7 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::expr() 	js/src/frontend/Parser.cpp
8 	mozjs.dll 	js::frontend::FullParseHandler::newPropertyByValue(js::frontend::ParseNode *,js::frontend::ParseNode *,unsigned int) 	js/src/frontend/FullParseHandler.h
9 	mozjs.dll 	js::frontend::TokenStream::getTokenInternal(js::frontend::TokenStream::Modifier) 	js/src/frontend/TokenStream.cpp
10 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::noteNameUse(JS::Handle<js::PropertyName *>,js::frontend::ParseNode *) 	js/src/frontend/Parser.cpp
11 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::identifierName() 	js/src/frontend/Parser.cpp
12 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr() 	js/src/frontend/Parser.cpp
13 	mozjs.dll 	JSObject::setLastProperty(js::ThreadSafeContext *,JS::Handle<JSObject *>,JS::Handle<js::Shape *>) 	js/src/jsobj.cpp
14 	mozjs.dll 	js::detail::HashTable<js::AtomStateEntry const ,js::HashSet<js::AtomStateEntry,js::AtomHasher,js::SystemAllocPolicy>::SetOps,js::SystemAllocPolicy>::lookup(js::AtomHasher::Lookup const &,unsigned int,unsigned int) 	obj-firefox/dist/include/js/HashTable.h
15 	mozjs.dll 	js::AtomizeChars(js::ExclusiveContext *,wchar_t const *,unsigned __int64,js::InternBehavior) 	js/src/jsatom.cpp
16 	msvcr100.dll 	getptd_noexit 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\tidtable.c
17 	msvcr100.dll 	errno 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\dosmap.c
18 	msvcr100.dll 	isatty 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\isatty.c
19 	mozjs.dll 	js::frontend::TokenStream::getTokenInternal(js::frontend::TokenStream::Modifier) 	js/src/frontend/TokenStream.cpp
20 	msvcr100.dll 	printf 	f:\dd\vctools\crt_bld\self_64_amd64\crt\src\printf.c
21 	xul.dll 	Fault 	xpcom/base/nsCycleCollector.cpp
22 	xul.dll 	GCGraphBuilder::DescribeRefCountedNode(unsigned long,char const *) 	xpcom/base/nsCycleCollector.cpp
23 	mozjs.dll 	js::frontend::TokenStream::getTokenInternal(js::frontend::TokenStream::Modifier) 	js/src/frontend/TokenStream.cpp
24 	xul.dll 	nsDOMEventTargetHelper::cycleCollection::Traverse(void *,nsCycleCollectionTraversalCallback &) 	content/events/src/nsDOMEventTargetHelper.cpp
25 	mozjs.dll 	js::EmptyShape::getInitialShape(js::ExclusiveContext *,js::Class const *,js::TaggedProto,JSObject *,JSObject *,unsigned __int64,unsigned int) 	js/src/vm/Shape.cpp
26 	mozjs.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::tryStatement() 	js/src/frontend/Parser.cpp
27 	KERNELBASE.dll 	ReleaseSemaphore 	
28 	nss3.dll 	md_UnlockAndPostNotifies 	nsprpub/pr/src/md/windows/w95cv.c
29 	mozjs.dll 	js::Bindings::initWithTemporaryStorage(js::ExclusiveContext *,js::InternalHandle<js::Bindings *>,unsigned int,unsigned int,js::Binding *) 	js/src/jsscript.cpp
30 	KERNELBASE.dll 	VirtualAlloc 	
31 	mozglue.dll 	arena_run_split 	memory/mozjemalloc/jemalloc.c
32 	mozglue.dll 	arena_run_alloc 	memory/mozjemalloc/jemalloc.c
33 	mozglue.dll 	arena_run_split 	memory/mozjemalloc/jemalloc.c
34 	mozglue.dll 	arena_malloc 	memory/mozjemalloc/jemalloc.c
35 	mozglue.dll 	je_malloc 	memory/mozjemalloc/jemalloc.c
36 	mozalloc.dll 	moz_xmalloc 	memory/mozalloc/mozalloc.cpp
37 	xul.dll 	NodePool::Builder::Add(void *,nsCycleCollectionParticipant *) 	xpcom/base/nsCycleCollector.cpp
38 	xul.dll 	nsXHREventTarget::cycleCollection::Traverse(void *,nsCycleCollectionTraversalCallback &) 	content/base/src/nsDOMDataChannel.cpp
39 	xul.dll 	mozilla::dom::workers::XMLHttpRequest::cycleCollection::Traverse(void *,nsCycleCollectionTraversalCallback &) 	dom/workers/XMLHttpRequest.cpp
40 	xul.dll 	GCGraphBuilder::Traverse(PtrInfo *) 	xpcom/base/nsCycleCollector.cpp
41 	xul.dll 	nsPurpleBuffer::VisitEntries<SelectPointersVisitor>(SelectPointersVisitor &) 	xpcom/base/nsCycleCollector.cpp
42 	xul.dll 	nsCycleCollector::MarkRoots(GCGraphBuilder &) 	xpcom/base/nsCycleCollector.cpp
43 	xul.dll 	nsPurpleBuffer::SelectPointers(GCGraphBuilder &) 	xpcom/base/nsCycleCollector.cpp
44 	xul.dll 	nsCycleCollector::BeginCollection(ccType,nsICycleCollectorListener *)

Comment 2

[(Away)]

Confirmed this is the same as 937720 after fixing symbols with a reference binary.