Closed
Bug 1375445
Opened 7 years ago
Closed 4 years ago
Crash in js::gc::GCRuntime::sweepAtomsTable
Categories
(Core :: JavaScript: GC, defect, P3)
Tracking
()
RESOLVED
WORKSFORME
Tracking | Status | |
---|---|---|
firefox-esr52 | --- | unaffected |
firefox54 | --- | unaffected |
firefox55 | --- | fix-optional |
firefox56 | --- | fix-optional |
firefox57 | --- | fix-optional |
People
(Reporter: philipp, Unassigned)
References
Details
(Keywords: crash, regression)
Crash Data
This bug was filed from the Socorro interface and is
report bp-059adc6b-60ea-40cf-a93d-1abc00170622.
=============================================================
Crashing Thread (0)
Frame Module Signature Source
0 xul.dll js::gc::GCRuntime::sweepAtomsTable(js::SliceBudget&) js/src/jsgc.cpp:5605
1 xul.dll js::gc::GCRuntime::sweepAtomsTable(js::gc::GCRuntime*, js::FreeOp*, JS::Zone*, js::SliceBudget&, js::gc::AllocKind) js/src/jsgc.cpp:5582
2 xul.dll js::gc::GCRuntime::performSweepActions(js::SliceBudget&, js::AutoLockForExclusiveAccess&) js/src/jsgc.cpp:5720
3 xul.dll js::gc::GCRuntime::incrementalCollectSlice(js::SliceBudget&, JS::gcreason::Reason, js::AutoLockForExclusiveAccess&) js/src/jsgc.cpp:6329
4 xul.dll js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) js/src/jsgc.cpp:6614
5 xul.dll js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) js/src/jsgc.cpp:6763
crash reports with this signature are newly showing up in firefox 55 - so far only from windows users. it looks related to bug 1369444.
Comment 1•7 years ago
|
||
Discussed during triage, ni on jcoppeard since he has been working in this area.
Flags: needinfo?(jcoppeard)
Comment 2•7 years ago
|
||
This is a continuation of the JSRuntime::sweepAtoms crashes (the code was moved into GCRuntime::sweepAtomsTable in bug 1369444).
https://crash-stats.mozilla.com/signature/?signature=JSRuntime%3A%3AsweepAtoms&date=%3E%3D2017-01-06T11%3A57%3A23.000Z&date=%3C2017-07-06T11%3A57%3A23.000Z&_columns=date&_columns=product&_columns=version&_columns=build_id&_columns=platform&_columns=reason&_columns=address&_columns=install_time&_sort=-date&page=1#graphs
This is probably heap corruption / bad memory.
Flags: needinfo?(jcoppeard)
Comment 3•7 years ago
|
||
(In reply to Jon Coppeard (:jonco) from comment #2)
> This is a continuation of the JSRuntime::sweepAtoms crashes (the code was
> moved into GCRuntime::sweepAtomsTable in bug 1369444).
>
> https://crash-stats.mozilla.com/signature/
> ?signature=JSRuntime%3A%3AsweepAtoms&date=%3E%3D2017-01-06T11%3A57%3A23.
> 000Z&date=%3C2017-07-06T11%3A57%3A23.
> 000Z&_columns=date&_columns=product&_columns=version&_columns=build_id&_colum
> ns=platform&_columns=reason&_columns=address&_columns=install_time&_sort=-
> date&page=1#graphs
>
> This is probably heap corruption / bad memory.
Jon: From Triage team: Are there are any next steps here? Volume is not extremely high, but about 140 crashes in the last week.
Flags: needinfo?(jcoppeard)
Comment 4•7 years ago
|
||
I don't think there's anything we can usefully do here.
Flags: needinfo?(jcoppeard)
Updated•7 years ago
|
Comment 5•7 years ago
|
||
Not actionable as stated. Likely bad memory.
status-firefox57:
--- → fix-optional
Priority: -- → P3
Comment 6•4 years ago
|
||
Crash is effectively gone after version 62 - only two crashes of newer versions in past two months
bp- 543e56d8-b801-4743-bcdd-f87050201012 81.0.1
bp-5bedf3dc-2da2-44df-b4bd-7de640200930 81.0
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•