984418 - Segfault in MarkRuntime() at RootMarking.cpp:684

Status: RESOLVED INCOMPLETE

(Firefox for Android Graveyard :: General, defect)

Description

[Botond Ballo [:botond]]

STR:
  1. Build Fennec from today's trunk and run it.
  2. Load newegg.com

Stack trace:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 15373]
js::gc::MarkRuntime (trc=0x6120e298, useSavedRoots=false) at /home/botond/dev/mozilla/central/js/src/gc/RootMarking.cpp:684
684  {
(gdb) i s
#0  js::gc::MarkRuntime (trc=0x6120e298, useSavedRoots=false) at /home/botond/dev/mozilla/central/js/src/gc/RootMarking.cpp:684
#1  0x5d29772c in BeginMarkPhase (rt=rt@entry=0x6120e000) at /home/botond/dev/mozilla/central/js/src/jsgc.cpp:3094
#2  0x5d2af987 in IncrementalCollectSlice (rt=rt@entry=0x6120e000, budget=<optimized out>, reason=reason@entry=JS::gcreason::DOM_UTILS, gckind=gckind@entry=js::GC_NORMAL) at /home/botond/dev/mozilla/central/js/src/jsgc.cpp:4605
#3  0x5d2b066b in GCCycle (rt=rt@entry=0x6120e000, incremental=incremental@entry=false, budget=0, gckind=gckind@entry=js::GC_NORMAL, reason=reason@entry=JS::gcreason::DOM_UTILS) at /home/botond/dev/mozilla/central/js/src/jsgc.cpp:4791
#4  0x5d2b09c4 in Collect (rt=rt@entry=0x6120e000, incremental=incremental@entry=false, budget=0, gckind=gckind@entry=js::GC_NORMAL, reason=reason@entry=JS::gcreason::DOM_UTILS) at /home/botond/dev/mozilla/central/js/src/jsgc.cpp:4929
#5  0x5d2b109e in js::GC (rt=0x6120e000, gckind=js::GC_NORMAL, reason=JS::gcreason::DOM_UTILS) at /home/botond/dev/mozilla/central/js/src/jsgc.cpp:4960
#6  0x5d1fe39d in JS::GCForReason (rt=0x6120e000, reason=JS::gcreason::DOM_UTILS) at /home/botond/dev/mozilla/central/js/src/jsfriendapi.cpp:200
#7  0x5bd6ff81 in nsJSContext::GarbageCollectNow (aReason=JS::gcreason::DOM_UTILS, aIncremental=nsJSContext::NonIncrementalGC, aCompartment=nsJSContext::NonCompartmentGC, aShrinking=nsJSContext::NonShrinkingGC, aSliceMillis=0)
    at /home/botond/dev/mozilla/central/dom/base/nsJSEnvironment.cpp:1866
#8  0x5bd2f434 in nsDOMWindowUtils::GarbageCollect (this=0x65f77700, aListener=0x0, aExtraForgetSkippableCalls=0) at /home/botond/dev/mozilla/central/dom/base/nsDOMWindowUtils.cpp:1419
#9  0x5b05dc64 in NS_InvokeByIndex () from /home/botond/dev/mozilla/out-of-tree-objdirs/android-x86/dist/bin/libxul.so
#10 0x5bccbf5f in Invoke (this=0x5451b100) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedNative.cpp:2406
#11 CallMethodHelper::Call (this=0x5451b100) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedNative.cpp:1747
#12 0x5bcc5c6c in XPCWrappedNative::CallMethod (ccx=..., mode=XPCWrappedNative::CALL_METHOD) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedNative.cpp:1714
#13 0x5bcc6394 in XPC_WN_CallMethod (cx=0x6420f580, argc=0, vp=0x614d2120) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1280
#14 0x5d3eac41 in js::CallJSNative (cx=0x6420f580, native=0x5bcc61b0 <XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*)>, args=...) at /home/botond/dev/mozilla/central/js/src/jscntxtinlines.h:239
#15 0x5d3e2461 in js::Invoke (cx=cx@entry=0x6420f580, args=..., construct=construct@entry=js::NO_CONSTRUCT) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:476
#16 0x5d3d4d78 in Interpret (cx=cx@entry=0x6420f580, state=...) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:2614
#17 0x5d3e1538 in RunScript (state=..., cx=0x6420f580) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:423
#18 js::RunScript (cx=0x6420f580, state=...) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:388
#19 0x5d3e23c2 in js::Invoke (cx=cx@entry=0x6420f580, args=..., construct=construct@entry=js::NO_CONSTRUCT) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:495
#20 0x5d3e2f31 in js::Invoke (cx=0x6420f580, thisv=..., fval=..., argc=3, argv=0x5451c174, rval=...) at /home/botond/dev/mozilla/central/js/src/vm/Interpreter.cpp:532
#21 0x5d229bc5 in JS_CallFunctionValue (cx=0x6420f580, obj=..., fval=..., args=..., rval=...) at /home/botond/dev/mozilla/central/js/src/jsapi.cpp:4897
#22 0x5bcc4298 in nsXPCWrappedJSClass::CallMethod (this=0x61471550, wrapper=0x64cfab40, methodIndex=3, info_=0x612d2fa0, nativeParams=0x5451c2d0) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedJSClass.cpp:1273
#23 0x5bcab57e in nsXPCWrappedJS::CallMethod (this=0x64cfab40, methodIndex=3, info=0x612d2fa0, params=0x5451c2d0) at /home/botond/dev/mozilla/central/js/xpconnect/src/XPCWrappedJS.cpp:517
#24 0x5b05e815 in PrepareAndDispatch (methodIndex=<optimized out>, self=0x64c37790, args=<optimized out>) at /home/botond/dev/mozilla/central/xpcom/reflect/xptcall/src/md/unix/xptcstubs_gcc_x86_unix.cpp:60
#25 0x5b0286f1 in nsObserverList::NotifyObservers (this=0x64d8a1d4, aSubject=0x0, aTopic=0x5d557190 "memory-pressure", someData=0x5d896aaa u"heap-minimize") at /home/botond/dev/mozilla/central/xpcom/ds/nsObserverList.cpp:96
#26 0x5b0287ea in NotifyObservers (someData=0x5d896aaa u"heap-minimize", aTopic=0x5d557190 "memory-pressure", aSubject=0x0, this=0x5318c980) at /home/botond/dev/mozilla/central/xpcom/ds/nsObserverService.cpp:302
#27 nsObserverService::NotifyObservers (this=0x5318c980, aSubject=0x0, aTopic=0x5d557190 "memory-pressure", someData=0x5d896aaa u"heap-minimize") at /home/botond/dev/mozilla/central/xpcom/ds/nsObserverService.cpp:290
#28 0x5bc15abb in nsAppShell::ProcessNextNativeEvent (this=0x53111420, mayWait=true) at /home/botond/dev/mozilla/central/widget/android/nsAppShell.cpp:317
#29 0x5bc31fed in nsBaseAppShell::DoProcessNextNativeEvent (this=0x53111420, mayWait=true, recursionDepth=0) at /home/botond/dev/mozilla/central/widget/xpwidgets/nsBaseAppShell.cpp:140
#30 0x5bc3210e in nsBaseAppShell::OnProcessNextEvent (this=0x53111420, thr=0x53123b00, mayWait=<optimized out>, recursionDepth=0) at /home/botond/dev/mozilla/central/widget/xpwidgets/nsBaseAppShell.cpp:298
#31 0x5b053113 in ProcessNextEvent (result=0x5451c61f, mayWait=true, this=0x53123b00) at /home/botond/dev/mozilla/central/xpcom/threads/nsThread.cpp:667
#32 nsThread::ProcessNextEvent (this=0x53123b00, mayWait=true, result=0x5451c61f) at /home/botond/dev/mozilla/central/xpcom/threads/nsThread.cpp:618
#33 0x5afea282 in NS_ProcessNextEvent (thread=<optimized out>, mayWait=true) at /home/botond/dev/mozilla/central/xpcom/glue/nsThreadUtils.cpp:263
#34 0x5b2ec90c in mozilla::ipc::MessagePump::Run (this=0x53101d00, aDelegate=0x531420c0) at /home/botond/dev/mozilla/central/ipc/glue/MessagePump.cpp:136
#35 0x5b2c0675 in MessageLoop::RunInternal (this=0x531420c0) at /home/botond/dev/mozilla/central/ipc/chromium/src/base/message_loop.cc:226
#36 0x5b2c06e3 in RunHandler (this=0x531420c0) at /home/botond/dev/mozilla/central/ipc/chromium/src/base/message_loop.cc:219
#37 MessageLoop::Run (this=0x531420c0) at /home/botond/dev/mozilla/central/ipc/chromium/src/base/message_loop.cc:193
#38 0x5bc2640a in nsBaseAppShell::Run (this=0x53111420) at /home/botond/dev/mozilla/central/widget/xpwidgets/nsBaseAppShell.cpp:164
#39 0x5c97e06f in nsAppStartup::Run (this=0x61450910) at /home/botond/dev/mozilla/central/toolkit/components/startup/nsAppStartup.cpp:276
#40 0x5c8fbc72 in XREMain::XRE_mainRun (this=0x5451c8ac) at /home/botond/dev/mozilla/central/toolkit/xre/nsAppRunner.cpp:4010
#41 0x5c8fbf62 in XREMain::XRE_main (this=0x5451c8ac, argc=9, argv=0x53117108, aAppData=0x52fc2ca8 <sAppData>) at /home/botond/dev/mozilla/central/toolkit/xre/nsAppRunner.cpp:4079
#42 0x5c8fc181 in XRE_main (argc=9, argv=0x53117108, aAppData=0x52fc2ca8 <sAppData>, aFlags=0) at /home/botond/dev/mozilla/central/toolkit/xre/nsAppRunner.cpp:4291
#43 0x5c90364a in GeckoStart (data=0x53123280, appData=0x52fc2ca8 <sAppData>) at /home/botond/dev/mozilla/central/toolkit/xre/nsAndroidStartup.cpp:73
#44 0x52f76a0a in Java_org_mozilla_gecko_mozglue_GeckoLoader_nativeRun (jenv=0x9a5eda0, jc=0x21b00001, jargs=0x21900005) at /home/botond/dev/mozilla/central/mozglue/android/APKOpen.cpp:379
#45 0x41280230 in dvmPlatformInvoke () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#46 0x412cdbb9 in dvmCallJNIMethod(unsigned int const*, JValue*, Method const*, Thread*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#47 0x412d8f8d in dvmResolveNativeMethod(unsigned int const*, JValue*, Method const*, Thread*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#48 0x41379814 in common_invokeMethodNoRange () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#49 0x5441cf80 in ?? ()
#50 0x41292566 in dvmMterpStd(Thread*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#51 0x4128ec06 in dvmInterpret(Thread*, Method const*, JValue*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#52 0x412fbe12 in dvmCallMethodV(Thread*, Method const*, Object*, bool, JValue*, char*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#53 0x412fbfd2 in dvmCallMethod(Thread*, Method const*, Object*, JValue*, ...) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#54 0x412e313e in interpThreadStart(void*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#55 0x40014d12 in __thread_entry () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libc.so
#56 0x4001dc75 in __pthread_clone () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libc.so
#57 0x5451cf00 in ?? ()
#58 0x413147b5 in dvmFindDirectMethodHier(ClassObject const*, char const*, DexProto const*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#59 0x41314f51 in dvmResolveMethod () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#60 0x41379814 in common_invokeMethodNoRange () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#61 0x4caaabf4 in ?? ()
---Type <return> to continue, or q <return> to quit---
#62 0x41292566 in dvmMterpStd(Thread*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#63 0x4128ec06 in dvmInterpret(Thread*, Method const*, JValue*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#64 0x412fbaaa in dvmInvokeMethod(Object*, Method const*, ArrayObject*, ArrayObject*, ClassObject*, bool) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#65 0x4130c5ca in Dalvik_java_lang_reflect_Method_invokeNative(unsigned int const*, JValue*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#66 0x41379814 in common_invokeMethodNoRange () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#67 0x4caacf00 in ?? ()
#68 0x41292566 in dvmMterpStd(Thread*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#69 0x4128ec06 in dvmInterpret(Thread*, Method const*, JValue*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#70 0x412fbe12 in dvmCallMethodV(Thread*, Method const*, Object*, bool, JValue*, char*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#71 0x412cfada in CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, char*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libdvm.so
#72 0x4020850a in _JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libandroid_runtime.so
#73 0x40209b34 in android::AndroidRuntime::start(char const*, char const*) () from /home/botond/programs/jimdb-x86/lib/TA32404O4Y/system/lib/libandroid_runtime.so
#74 0x080491d7 in main ()

Comment 1

[BMO Automation]

We have completed our launch of our new Firefox on Android. The development of the new versions use GitHub for issue tracking. If the bug report still reproduces in a current version of [Firefox on Android nightly](https://play.google.com/store/apps/details?id=org.mozilla.fenix) an issue can be reported at the [Fenix GitHub project](https://github.com/mozilla-mobile/fenix/). If you want to discuss your report please use [Mozilla's chat](https://wiki.mozilla.org/Matrix#Connect_to_Matrix) server https://chat.mozilla.org and join the [#fenix](https://chat.mozilla.org/#/room/#fenix:mozilla.org) channel.