976555 - Intermittent PROCESS-CRASH | overbar-width-1.xhtml | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Carsten Book [:Tomcat]]

Android 2.2 Armv6 Tegra mozilla-inbound opt test plain-reftest-3 on 2014-02-25 05:32:15 PST for push 17c0f29d7008

slave: tegra-095

https://tbpl.mozilla.org/php/getParsedLog.php?id=35213293&tree=Mozilla-Inbound



PROCESS-CRASH | http://10.26.84.16:30095/tests/layout/reftests/mathml/overbar-width-1.xhtml | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Operating system: Android
                  0.0.0 Linux 2.6.32.9-00002-gd8084dc-dirty #1 SMP PREEMPT Wed Feb 2 11:32:06 PST 2011 armv7l nvidia/harmony/harmony/harmony:2.2/FRF91/20110202.102810:eng/test-keys
CPU: arm
     2 CPUs

Crash reason:  SIGSEGV
Crash address: 0x4

Thread 6 (crashed)
 0  libxul.so!js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8
     r4 = 0x4f3b496c    r5 = 0x58503ed0    r6 = 0x55643a10    r7 = 0x4f3b4a18
     r8 = 0x5b30f200    r9 = 0x5eb0b040   r10 = 0x555f0e04    fp = 0x5b30f200
     sp = 0x4f3b48d8    lr = 0x5508be30    pc = 0x54ef5da4
    Found by: given as instruction pointer in context
 1  libxul.so!JSCompartment::wrap(JSContext*, JS::MutableHandle<JSObject*>, JS::Handle<JSObject*>) [Barrier.h:17c0f29d7008 : 198 + 0xa]
     r4 = 0x4f3b496c    r5 = 0x58503ed0    r6 = 0x55643a10    r7 = 0x4f3b4a18
     r8 = 0x5b30f200    r9 = 0x5eb0b040   r10 = 0x555f0e04    fp = 0x5b30f200
     sp = 0x4f3b48e8    pc = 0x5508be30
    Found by: call frame info
 2  libxul.so!JS_WrapObject(JSContext*, JS::MutableHandle<JSObject*>) [jsapi.cpp:17c0f29d7008 : 1007 + 0x6]
     r4 = 0x58503ed0    r5 = 0x55643a10    r6 = 0x4f3b496c    r7 = 0x4f3b4a18
     r8 = 0x00000000    r9 = 0x5eb0b040   r10 = 0x00000001    fp = 0x5c429640
     sp = 0x4f3b4950    pc = 0x5508c740
    Found by: call frame info
 3  libxul.so!XPCConvert::NativeInterface2JSObject(JS::MutableHandle<JS::Value>, nsIXPConnectJSObjectHolder**, xpcObjectHelper&, nsID const*, XPCNativeInterface**, bool, tag_nsresult*) [XPCConvert.cpp:17c0f29d7008 : 833 + 0xe]
     r4 = 0x00000000    r5 = 0x4f3b4abc    r6 = 0x58c42d44    r7 = 0x4f3b4a18
     r8 = 0x00000000    r9 = 0x5eb0b040   r10 = 0x00000001    fp = 0x5c429640
     sp = 0x4f3b4960    pc = 0x542658f8
    Found by: call frame info
 4  libxul.so!XPCConvert::NativeData2JS(JS::MutableHandle<JS::Value>, void const*, nsXPTType const&, nsID const*, tag_nsresult*) [XPCConvert.cpp:17c0f29d7008 : 322 + 0x1a]
     r4 = 0x00000001    r5 = 0x00000000    r6 = 0x553d0fbc    r7 = 0x4f3b4abc
     r8 = 0x4f3b4b20    r9 = 0x00000001   r10 = 0x4f3b4aa8    fp = 0x4f3b4ab1
     sp = 0x4f3b49f0    pc = 0x54266148
    Found by: call frame info
 5  libxul.so!XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) [XPCWrappedNative.cpp:17c0f29d7008 : 1944 + 0x6]
     r4 = 0x00000000    r5 = 0x00000000    r6 = 0x00000000    r7 = 0x4f3b4b60
     r8 = 0x00000000    r9 = 0x00000001   r10 = 0x00000000    fp = 0x4f3b4ab1
     sp = 0x4f3b4a88    pc = 0x5427b900

Comment 1

[Legacy TBPL/Treeherder Robot]

edmorley
https://tbpl.mozilla.org/php/getParsedLog.php?id=35428514&tree=Fx-Team
Android 2.2 Armv6 Tegra fx-team opt test plain-reftest-2 on 2014-02-28 08:27:14
revision: 9f98b006e896
slave: tegra-217

PROCESS-CRASH | http://10.26.84.22:30217/tests/layout/reftests/counters/t1204-multiple-01-c-test.html | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Comment 2

[Legacy TBPL/Treeherder Robot]

Tomcat
https://tbpl.mozilla.org/php/getParsedLog.php?id=35591016&tree=Mozilla-Central
Android 2.2 Armv6 Tegra mozilla-central opt test plain-reftest-3 on 2014-03-04 03:59:14
revision: 529b86b92b1d
slave: tegra-269

PROCESS-CRASH | http://10.26.84.26:30269/tests/layout/reftests/mathml/menclose-5-updiagonalstrike.html | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Comment 3

[Legacy TBPL/Treeherder Robot]

ehsan
https://tbpl.mozilla.org/php/getParsedLog.php?id=36210913&tree=Try
Android 2.2 Armv6 Tegra try opt test plain-reftest-3 on 2014-03-15 14:24:20
revision: 7442d8aadeaa
slave: tegra-246

PROCESS-CRASH | http://10.26.84.24:30246/tests/layout/reftests/margin-collapsing/block-no-content-1d.html | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*)]

Comment 4

[Legacy TBPL/Treeherder Robot]

philor
https://tbpl.mozilla.org/php/getParsedLog.php?id=36584760&tree=B2g-Inbound
Android 2.2 Armv6 Tegra b2g-inbound opt test plain-reftest-2 on 2014-03-23 18:35:15
revision: fa098f9fe89c
slave: tegra-280

PROCESS-CRASH | http://10.26.84.27:30280/tests/layout/reftests/flexbox/flexbox-resizeviewport-1.xhtml | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Comment 5

[Legacy TBPL/Treeherder Robot]

RyanVM
https://tbpl.mozilla.org/php/getParsedLog.php?id=37063486&tree=Mozilla-Aurora
Android 2.2 Armv6 Tegra mozilla-aurora opt test plain-reftest-1 on 2014-04-01 03:34:12
revision: 9223243c65a2
slave: tegra-155

PROCESS-CRASH | http://10.26.84.5:30155/tests/layout/reftests/w3c-css/submitted/variables/variable-reference-29.html | application crashed [@ js::gc::MarkObject(JSTracer*, js::BarrieredPtr<JSFunction, unsigned int>*, char const*) + 0x8]

Comment 6

[Ed Morley [:emorley]]

Closing bugs where TBPLbot has previously commented, but have now not been modified for >3 months & do not contain the whiteboard strings for disabled/annotated tests or use the keyword leave-open. Filter on: mass-intermittent-bug-closure-2014-07