991694 - Assertion failure: [unhandlable oom] Failed to allocate object while tenuring., at c:\work\mozilla\builds\nightly\mozilla\js\src\jscntxt.cpp:1373

Status: RESOLVED DUPLICATE of bug 999158

(Core :: JavaScript Engine, defect)

Description

[Carsten Book [:Tomcat]]

Attachment: windows crash report

found via bughunter on http://www.cahba.com/advice/covered_california/

Loading this site result in a win7 trunk debug build based on latest m-c tip after awhile during load in

Assertion failure: [unhandlable oom] Failed to allocate object while tenuring., at c:\work\mozilla\builds\nightly\mozilla\js\src\jscntxt.cpp:1373
Hit MOZ_CRASH() at c:\work\mozilla\builds\nightly\mozilla\js\src\jscntxt.cpp:1374
[324] ###!!! ABORT: Aborting on channel error.: file c:\work\mozilla\builds\nightly\mozilla\ipc\glue\MessageChannel.cpp, line 1522

will see that i can get a testcase/regression range

Comment 1

[Benjamin Smedberg]

Why is this sec-private?

Comment 2

[Matt Wobensmith [:mwobensmith][:matt:]]

(In reply to Benjamin Smedberg  [:bsmedberg] from comment #1)
> Why is this sec-private?

I was asked to make it private by Liz Henry, who is doing some work on security-related bugs.

Comment 3

[Terrence Cole [:terrence]]

Why is this sec-private?

Comment 4

[Liz Henry (:lizzard) (relman/hg->git project)]

Terrence, I wasn't sure if it should be or not; I'm going through all the GGC bugs for Nightly and noticed this comment: https://bugzilla.mozilla.org/show_bug.cgi?id=992866#c1   I thought this might be similar. If it isn't, sorry about that!

Comment 5

[Liz Henry (:lizzard) (relman/hg->git project)]

Also, I just realized this isn't tagged GGC but I think it was filed as a result of one of the GGC bugs. Probably my mistake.

Comment 6

[Terrence Cole [:terrence]]

Ah, gotcha! CrashAtUnhandlableOOM is a straight-up crash, even in opt builds, so cannot be exploited. It prints "Assertion failure" only because we re-used the assertion printing machinery to ensure the print gets in the right dumps. Sorry for the confusion!

Comment 8

[Intermittent Failures Robot]

1 failures in 762 pushes (0.001 failures/push) were associated with this bug in the last 7 days.    

Repository breakdown:
* autoland: 1

Platform breakdown:
* windows7-32: 1

For more details, see:
https://brasstacks.mozilla.com/orangefactor/?display=Bug&bugid=991694&startday=2017-11-13&endday=2017-11-19&tree=all