Closed Bug 1263916 Opened 8 years ago Closed 8 years ago

OOM crash in js::ObjectGroup::sweep

Categories

(Core :: JavaScript: GC, defect)

x86
Windows NT
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1112741
Tracking Status
firefox46 + wontfix
firefox47 --- wontfix
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- affected
firefox53 --- affected

People

(Reporter: jimm, Unassigned)

References

Details

(Keywords: crash)

This bug was filed from the Socorro interface and is 
report bp-95e58494-991a-4784-8dda-124ad2160406.
=============================================================
#6 e10s beta 46 experiment crash signature with a higher than normal correlation to e10s (1.4 vs. 0.97).
Terrence, do you know what could be going on at this point to cause a crash? Is this an OOM? If so, why isn't it failing with one of the JS engine OOM crash annotations? (Bug 1263028 is the generic bug for this crash.)
Flags: needinfo?(terrence)
I'm not sure if this is an OOM or a busted pointer. Forwarding ni? to the author.
Flags: needinfo?(terrence) → needinfo?(bhackett1024)
This is still the #11 crash in very late beta 46 - without e10s enabled.
I don't think there's any OOM going on here, this looks the same as bug 1112741.  It's hard to tell exactly where it's crashing, is there a (simple) way to get the disassembly around the crash site?
per comment 5
Summary: OOM crash in js::ObjectGroup::sweep under e10s → OOM crash in js::ObjectGroup::sweep
No longer blocks: e10s-oom
Crash volume for signature 'js::ObjectGroup::sweep':
 - esr (version 45): 1119 crashes from 2016-04-07.

Crash volume on the last 7 days:
         2016-07-21   2016-07-20   2016-07-19   2016-07-18   2016-07-17   2016-07-16   2016-07-15
 - esr           35           30           21           40            4            7           29

Affected platforms: Windows, Mac OS X, Linux
Crash volume for signature 'js::ObjectGroup::sweep':
 - nightly (version 51): 84 crashes from 2016-08-01.
 - aurora  (version 50): 110 crashes from 2016-08-01.
 - beta    (version 49): 4621 crashes from 2016-08-02.
 - release (version 48): 5786 crashes from 2016-07-25.
 - esr     (version 45): 1810 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly      19      28      23
 - aurora       44      40       6
 - beta       1512    1614     538
 - release    1959    1625     960
 - esr         168     158     159

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #149      #30
 - aurora  #72       #26
 - beta    #6        #5
 - release #11       #8
 - esr     #54
Crash volume for signature 'js::ObjectGroup::sweep':
 - nightly (version 52): 52 crashes from 2016-09-19.
 - aurora  (version 51): 54 crashes from 2016-09-19.
 - beta    (version 50): 1430 crashes from 2016-09-20.
 - release (version 49): 1190 crashes from 2016-09-05.
 - esr     (version 45): 2471 crashes from 2016-06-01.

Crash volume on the last weeks (Week N is from 10-03 to 10-09):
            W. N-1  W. N-2
 - nightly      41      11
 - aurora       46       8
 - beta       1078     352
 - release     930     259
 - esr         159     166

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #72       #41
 - aurora  #44       #53
 - beta    #13       #10
 - release #66       #48
 - esr     #77
It doesn't look like this is an OOM, only 0.56% of the crashes have contains_memory_report=1.
Crash volume for signature 'js::ObjectGroup::sweep':
 - nightly (version 53): 190 crashes from 2016-11-14.
 - aurora  (version 52): 202 crashes from 2016-11-14.
 - beta    (version 51): 4858 crashes from 2016-11-14.
 - release (version 50): 24428 crashes from 2016-11-01.
 - esr     (version 45): 4289 crashes from 2016-07-06.

Crash volume on the last weeks (Week N is from 01-02 to 01-08):
            W. N-1  W. N-2  W. N-3  W. N-4  W. N-5  W. N-6  W. N-7
 - nightly      22      36      38      22      25      29      17
 - aurora       31      39      32      17      35      31       1
 - beta        236     278     728    1410    1073     932     114
 - release    4620    4713    4912    4803    2647     936     366
 - esr         150     176     213     215     120     112     182

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content   Plugin
 - nightly #132      #38
 - aurora  #180      #46
 - beta    #17       #13
 - release #12       #9
 - esr     #78
Status: NEW → RESOLVED
Crash Signature: [@ js::ObjectGroup::sweep]
Closed: 8 years ago
Resolution: --- → DUPLICATE
Flags: needinfo?(bhackett1024)
You need to log in before you can comment on or make changes to this bug.