Closed Bug 596113 Opened 14 years ago Closed 14 years ago

Assertion failure loading tinderboxpushlog: fp->argv[-1] == fp->getThisValue()

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 591418

People

(Reporter: roc, Unassigned)

Details

#0  0x006ed889 in JS_Assert (s=0x83e8e4 "fp->argv[-1] == fp->getThisValue()", file=0x839e40 "/Users/roc/mozilla-checkin/js/src/jstracer.cpp", ln=9892) at /Users/roc/mozilla-checkin/js/src/jsutil.cpp:80
#1  0x007317e2 in js::TraceRecorder::getThis (this=0x2531d000, this_ins=@0xbfffaec8) at /Users/roc/mozilla-checkin/js/src/jstracer.cpp:9892
#2  0x00736168 in js::TraceRecorder::record_JSOP_THIS (this=0x2531d000) at /Users/roc/mozilla-checkin/js/src/jstracer.cpp:13901
#3  0x007448f1 in js::TraceRecorder::monitorRecording (this=0x2531d000, op=JSOP_THIS) at jsopcode.tbl:186
#4  0x0060b813 in js::Interpret (cx=0x25499000, entryFrame=0x159672d0, inlineCallCount=0, interpFlags=1) at /Users/roc/mozilla-checkin/js/src/jsinterp.cpp:2406
#5  0x0072b8fe in js::MonitorTracePoint (cx=0x25499000, inlineCallCount=@0xbfffbf40, blacklist=@0xbfffbf47) at /Users/roc/mozilla-checkin/js/src/jstracer.cpp:16256
#6  0x007d3d57 in RunTracer (f=@0xbfffbfc0, mic=@0x1c22292c) at /Users/roc/mozilla-checkin/js/src/methodjit/InvokeHelpers.cpp:891
#7  0x007d410b in js::mjit::stubs::InvokeTracer (f=@0xbfffbfc0, index=0) at /Users/roc/mozilla-checkin/js/src/methodjit/InvokeHelpers.cpp:994
#8  0x16aadc59 in ?? ()
#9  0x0077c66f in EnterMethodJIT (cx=0x25499000, fp=0x15967150, code=0x16aaa82c, safePoint=0x0) at /Users/roc/mozilla-checkin/js/src/methodjit/MethodJIT.cpp:760
#10 0x0077c84d in js::mjit::JaegerShot (cx=0x25499000) at /Users/roc/mozilla-checkin/js/src/methodjit/MethodJIT.cpp:788
#11 0x006350ca in js::RunScript (cx=0x25499000, script=0x1c2a9f80, fun=0x2ab33720, scopeChain=0x1bf6dea0) at jsinterp.cpp:465
#12 0x006363b6 in js::Invoke (cx=0x25499000, argsRef=@0xbfffc1e4, flags=0) at jsinterp.cpp:614
#13 0x005ef96a in js_fun_call (cx=0x25499000, argc=3, vp=0x159670f8) at /Users/roc/mozilla-checkin/js/src/jsfun.cpp:2273
#14 0x007c359d in CallCompiler::generateNativeStub (this=0xbfffc6a4) at /Users/roc/mozilla-checkin/js/src/methodjit/MonoIC.cpp:469
#15 0x007c234f in js::mjit::ic::NativeCall (f=@0xbfffc6d0, index=0) at /Users/roc/mozilla-checkin/js/src/methodjit/MonoIC.cpp:707
#16 0x16aaa65b in ?? ()
#17 0x0077c66f in EnterMethodJIT (cx=0x25499000, fp=0x15967038, code=0x1c3d8c5c, safePoint=0x0) at /Users/roc/mozilla-checkin/js/src/methodjit/MethodJIT.cpp:760
#18 0x0077c84d in js::mjit::JaegerShot (cx=0x25499000) at /Users/roc/mozilla-checkin/js/src/methodjit/MethodJIT.cpp:788
#19 0x006350ca in js::RunScript (cx=0x25499000, script=0x1c2672f0, fun=0x2ab0a3c0, scopeChain=0x2ab67ee8) at jsinterp.cpp:465
#20 0x006363b6 in js::Invoke (cx=0x25499000, argsRef=@0xbfffc8e4, flags=0) at jsinterp.cpp:614
#21 0x00636a8f in js::ExternalInvoke (cx=0x25499000, thisv=@0xbfffc948, fval=@0xbfffc988, argc=1, argv=0x2c965810, rval=0xbfffca50) at jsinterp.cpp:644
#22 0x00581f99 in js::ExternalInvoke (cx=0x25499000, obj=0x2ab69b40, fval=@0xbfffc988, argc=1, argv=0x2c965810, rval=0xbfffca50) at jsinterp.h:729
#23 0x005820bf in JS_CallFunctionValue (cx=0x25499000, obj=0x2ab69b40, fval={asBits = 18446462629514222472, s = {payload = {i32 = 716610440, u32 = 716610440, boo = 716610440, str = 0x2ab69b88, obj = 0x2ab69b88, ptr = 0x2ab69b88, why = 716610440}, tag = JSVAL_TAG_OBJECT}, asDouble = -nan(0xf00072ab69b88), asPtr = 0x2ab69b88}, argc=1, argv=0x2c965810, rval=0xbfffca50) at /Users/roc/mozilla-checkin/js/src/jsapi.cpp:4747
#24 0x12e95c02 in nsJSContext::CallEventHandler (this=0x2a125b50, aTarget=0x1c2f1ae0, aScope=0x1bf6dea0, aHandler=0x2ab69b88, aargv=0x201b2f60, arv=0xbfffcbbc) at /Users/roc/mozilla-checkin/dom/base/nsJSEnvironment.cpp:2186
#25 0x12f21b29 in nsJSEventListener::HandleEvent (this=0x1c2f1ce0, aEvent=0x2987fa30) at /Users/roc/mozilla-checkin/dom/src/events/nsJSEventListener.cpp:228

0 MachineResult(data = [object Object]) ["http://tests.themasta.com/tinderboxpushlog/js/TinderboxJSONUser.js":196]
    i = "tree"
    this = [object Object]
1 TinderboxJSONUser_parseTinderbox(td = [object Object], tree = "Firefox") ["http://tests.themasta.com/tinderboxpushlog/js/TinderboxJSONUser.js":161]
    note = ""
    revs = false
    buildScrape = undefined
    machineRunID = "1284424899.1284424900.1449.gz"
    endTime = 0
    startTime = Mon Sep 13 2010 17:41:39 GMT-0700 (PST)
    rev = false
    state = "building"
    build = [object Object]
    machineIndex = 4
    rowIndex = 0
    machineResults = [object Object]
    notes = [<b><a href=mailto:dao%mozilla.com>dao%mozilla.com</a> - 2010/09/13&nbsp;05:29:46</b>]<br>Bug 592960,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:25:38</b>]<br>Bug 492232,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:26:19</b>]<br>Bug 595062,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:27:06</b>]<br>Bug 592960,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:27:49</b>]<br>Bug 579244,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:28:19</b>]<br>Bug 570905,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;07:29:12</b>]<br>Bug 592960,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;08:43:02</b>]<br>Bug 593491, Bug 544601,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;09:44:10</b>]<br>Bug 482175,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;10:31:34</b>]<br>Bug 503623, Bug 569214, Bug 581025,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;10:32:07</b>]<br>Bug 570905,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;11:31:33</b>]<br>hg proxy wasn't feeling well, got restarted,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;11:31:33</b>]<br>hg proxy wasn't feeling well, got restarted,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:00:44</b>]<br>Bug 544601<br><br>[<b><a href=mailto:dao%mozilla.com>dao%mozilla.com</a> - 2010/09/13&nbsp;12:00:03</b>]<br>Bug 544601,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:01:09</b>]<br>Bug 556194,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:21:51</b>]<br>Bug 592960,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:39:06</b>]<br>Filed bug 595958,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:50:33</b>]<br>Bug 558705<br><br>[<b><a href=mailto:dwitte@mozilla.com>dwitte@mozilla.com</a> - 2010/09/13&nbsp;12:50:23</b>]<br>Bug 558705,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;12:54:32</b>]<br>Bug 579244,[<b><a href=mailto:josh@joshmatthews.net>josh@joshmatthews.net</a> - 2010/09/13&nbsp;13:12:10</b>]<br>Bug 586295<br><br>[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;13:11:48</b>]<br>Bug 586295,[<b><a href=mailto:dholbert@mozilla.com>dholbert@mozilla.com</a> - 2010/09/13&nbsp;13:49:58</b>]<br>hg.mozilla.org was getting DDOS'd,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:22:22</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:22:22</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:22:23</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:22:23</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:24:33</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:24:33</b>]<br>Cancelled,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:24:34</b>]<br>Cancelled,[<b><a href=mailto:dtownsend@oxymoronical.com>dtownsend@oxymoronical.com</a> - 2010/09/13&nbsp;14:46:40</b>]<br>Bug 579244<br><br>[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;14:46:33</b>]<br>Bug 579244,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;15:17:18</b>]<br>Backed out in 029d7a594ce7,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;15:17:31</b>]<br>Bug 544601,[<b><a href=mailto:ehsan%mozilla.com>ehsan%mozilla.com</a> - 2010/09/13&nbsp;15:31:02</b>]<br>Bug 492232,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;15:48:49</b>]<br>backed out in ccaffbc6a970,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:32:01</b>]<br>Bug 569238, Bug 569237, Bug 580483, Bug 557456,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:34:33</b>]<br>Backed out in 029d7a594ce7,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:35:08</b>]<br>Bug 558705,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:35:37</b>]<br>Backed out in 029d7a594ce7,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:46:33</b>]<br>should be fixed by a6ee83aa638e,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:46:34</b>]<br>should be fixed by a6ee83aa638e,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:46:34</b>]<br>should be fixed by a6ee83aa638e,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:46:34</b>]<br>should be fixed by a6ee83aa638e,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:47:11</b>]<br>a6ee83aa638e,[<b><a href=mailto:philringnalda@gmail.com>philringnalda@gmail.com</a> - 2010/09/13&nbsp;17:47:12</b>]<br>a6ee83aa638e,[<b><a href=mailto:justin.lebar+bug@gmail.com>justin.lebar+bug@gmail.com</a> - 2010/09/13&nbsp;17:57:02</b>]<br>Bug 593711,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:05:25</b>]<br>Bug 558705,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:06:00</b>]<br>Bug 565957,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:06:23</b>]<br>a6ee83aa638e,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:06:28</b>]<br>a6ee83aa638e,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:06:39</b>]<br>a6ee83aa638e,[<b><a href=mailto:mounir.lamouri@gmail.com>mounir.lamouri@gmail.com</a> - 2010/09/13&nbsp;18:23:05</b>]<br>Bug 579244
    machines = [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
    self = [object Object]
    this = [object Object]
2 tinderboxJSONGetScriptCallback(undefined, undefined, undefined) ["http://tests.themasta.com/tinderboxpushlog/js/TinderboxJSONUser.js":10]
    this = [object Object]
3 b() ["http://tests.themasta.com/tinderboxpushlog/js/jquery.js":124]
    this = [object Window @ 0x2a13cd80 (native @ 0x2a125ef8)]
4 anonymous([object Event @ 0x298866c0 (native @ 0x2987fa30)]) ["http://tests.themasta.com/tinderboxpushlog/js/jquery.js":127]
    this = [object HTMLScriptElement @ 0x1c2f1b90 (native @ 0x1c2f1ae0)]

(gdb) p *fp
$2 = {
  callobj = 0x2a0b0900, 
  argsobj = 0x2a0b07e0, 
  imacpc = 0x2ab36990 " ?\032%?+?", 
  script = 0x1c2a9b90, 
  thisv = {
    data = {
      asBits = 18446462629502977368, 
      s = {
        payload = {
          i32 = 705365336, 
          u32 = 705365336, 
          boo = 705365336, 
          str = 0x2a0b0558, 
          obj = 0x2a0b0558, 
          ptr = 0x2a0b0558, 
          why = 705365336
        }, 
        tag = JSVAL_TAG_OBJECT
      }, 
      asDouble = -nan(0xf00072a0b0558), 
      asPtr = 0x2a0b0558
    }
  }, 
  fun = 0x2ab33ae0, 
  argc = 1, 
  argv = 0x159672c8, 
  rval = {
    data = {
      asBits = 18446462607322775552, 
      s = {
        payload = {
          i32 = 0, 
          u32 = 0, 
          boo = 0, 
          str = 0x0, 
          obj = 0x0, 
          ptr = 0x0, 
          why = JS_ARRAY_HOLE
        }, 
        tag = JSVAL_TAG_UNDEFINED
      }, 
      asDouble = -nan(0xf000200000000), 
      asPtr = 0x0
    }
  }, 
  annotation = 0x0, 
  down = 0x159671d8, 
  savedPC = 0xbeef "", 
  static sInvalidPC = 0xbeef "", 
  ncode = 0x198f8dae, 
  scopeChain = 0x2a0b0900, 
  blockChain = 0x0, 
  flags = 1, 
  hookData = 0x159671d8, 
  callerVersion = 8192
}
(gdb) p fp->getThisValue()
$6 = (const js::Value &) @0x159672e0: {
  data = {
    asBits = 18446462629502977368, 
    s = {
      payload = {
        i32 = 705365336, 
        u32 = 705365336, 
        boo = 705365336, 
        str = 0x2a0b0558, 
        obj = 0x2a0b0558, 
        ptr = 0x2a0b0558, 
        why = 705365336
      }, 
      tag = JSVAL_TAG_OBJECT
    }, 
    asDouble = -nan(0xf00072a0b0558), 
    asPtr = 0x2a0b0558
  }
}
(gdb) p fp->argv[-1]
$7 = {
  data = {
    asBits = 18446462629502977368, 
    s = {
      payload = {
        i32 = 705365336, 
        u32 = 705365336, 
        boo = 705365336, 
        str = 0x2a0b0558, 
        obj = 0x2a0b0558, 
        ptr = 0x2a0b0558, 
        why = 705365336
      }, 
      tag = JSVAL_TAG_OBJECT
    }, 
    asDouble = -nan(0xf00072a0b0558), 
    asPtr = 0x2a0b0558
  }
}
Also happens on x86_64 linux on page http://www.inshaker.ru/event/whisky-live-2010/
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Component: JavaScript Debugging/Profiling APIs → JavaScript Engine
You need to log in before you can comment on or make changes to this bug.