Closed
Bug 627712
Opened 14 years ago
Closed 11 years ago
Crash in js::mjit::JITScript::purgePICs @ js::mjit::ic::BasePolyIC::releasePools
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
INVALID
People
(Reporter: scoobidiver, Unassigned)
References
Details
(Keywords: crash)
Crash Data
It is a new crash signature in the trunk.
It is #108 top crasher in 4.0b9 for the last week.
Signature js::mjit::ic::BasePolyIC::releasePools()
UUID bbe93bc3-7666-4578-a02e-ca3db2110117
Time 2011-01-17 08:20:30.563125
Uptime 63762
Last Crash 146311 seconds (1.7 days) before submission
Install Age 146292 seconds (1.7 days) since version was first installed.
Product Firefox
Version 4.0b9
Build ID 20110110191547
Branch 2.0
OS Windows NT
OS Version 6.1.7600
CPU x86
CPU Info AuthenticAMD family 16 model 4 stepping 3
Crash Reason EXCEPTION_ACCESS_VIOLATION_WRITE
Crash Address 0x2000
App Notes AdapterVendorID: 10de, AdapterDeviceID: 0615
Frame Module Signature [Expand] Source
0 mozjs.dll js::mjit::ic::BasePolyIC::releasePools js/src/methodjit/PolyIC.h:287
1 mozjs.dll js::mjit::JITScript::purgePICs js/src/methodjit/PolyIC.cpp:2773
2 mozjs.dll JSCompartment::purge js/src/jscompartment.cpp:476
3 mozjs.dll PreGCCleanup js/src/jsgc.cpp:2261
4 mozjs.dll GCUntilDone js/src/jsgc.cpp:2725
5 mozjs.dll JS_GC js/src/jsapi.cpp:2547
6 xul.dll nsXPConnect::Collect js/src/xpconnect/src/nsXPConnect.cpp:407
7 xul.dll nsXPConnect::GarbageCollect js/src/xpconnect/src/nsXPConnect.cpp:415
8 xul.dll nsJSContext::CC dom/base/nsJSEnvironment.cpp:3630
9 xul.dll nsThread::ProcessNextEvent xpcom/threads/nsThread.cpp:649
10 xul.dll mozilla::ipc::MessagePump::Run ipc/glue/MessagePump.cpp:134
11 xul.dll xul.dll@0xb20297
12 xul.dll MessageLoop::RunInternal ipc/chromium/src/base/message_loop.cc:219
13 xul.dll MessageLoop::RunHandler ipc/chromium/src/base/message_loop.cc:202
14 mozcrt19.dll _VEC_memzero
15 xul.dll xul.dll@0x35dcad
16 firefox.exe firefox.exe@0x1bb7
17 ntdll.dll WinSqmSetIfMaxDWORD
18 ntdll.dll _RtlUserThreadStart
19 firefox.exe firefox.exe@0x186f
20 firefox.exe firefox.exe@0x186f
More reports at:
http://crash-stats.mozilla.com/report/list?range_value=4&range_unit=weeks&signature=js%3A%3Amjit%3A%3Aic%3A%3ABasePolyIC%3A%3AreleasePools%28%29&version=Firefox%3A4.0b9
Updated•13 years ago
|
Crash Signature: [@ js::mjit::ic::BasePolyIC::releasePools() ]
Comment 1•13 years ago
|
||
This seems to now be Instantbird's #2 crasher (and should be moving to the #1 crasher, if we fixed it properly...), related Instantbird bug: https://bugzilla.instantbird.org/show_bug.cgi?id=1247
Crash reports:
http://crash-stats.instantbird.com/report/list?product=Instantbird&query_search=signature&query_type=exact&range_value=1&range_unit=weeks&do_query=1&signature=js%3A%3Amjit%3A%3Aic%3A%3ABasePolyIC%3A%3AreleasePools%28%29
Blocks: Instantbird
Reporter | ||
Comment 2•13 years ago
|
||
In Firefox, it's a low volume crash.
The stack now looks like:
rame Module Signature [Expand] Source
0 mozjs.dll js::mjit::ic::BasePolyIC::releasePools js/src/methodjit/PolyIC.h:187
1 mozjs.dll js::mjit::JITScript::purgePICs js/src/methodjit/PolyIC.cpp:3260
2 mozjs.dll js::mjit::ic::PurgePICs js/src/methodjit/PolyIC.cpp:3275
3 mozjs.dll JSCompartment::sweep js/src/jscompartment.cpp:561
4 mozjs.dll SweepPhase js/src/jsgc.cpp:2313
5 mozjs.dll MarkAndSweep js/src/jsgc.cpp:2406
6 mozjs.dll GCCycle js/src/jsgc.cpp:2649
7 mozjs.dll js_GC js/src/jsgc.cpp:2735
8 mozjs.dll JS_CompartmentGC js/src/jsapi.cpp:2616
9 mozjs.dll JS_GC js/src/jsapi.cpp:2623
10 xul.dll nsXPConnect::Collect js/src/xpconnect/src/nsXPConnect.cpp:415
11 xul.dll nsXPConnect::GarbageCollect js/src/xpconnect/src/nsXPConnect.cpp:423
12 xul.dll nsJSContext::GarbageCollectNow dom/base/nsJSEnvironment.cpp:3189
13 xul.dll nsTimerImpl::Fire xpcom/threads/nsTimerImpl.cpp:424
14 xul.dll nsTimerEvent::Run xpcom/threads/nsTimerImpl.cpp:520
More reports at:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3Amjit%3A%3Aic%3A%3ABasePolyIC%3A%3AreleasePools%28%29
Summary: Crash [@ js::mjit::ic::BasePolyIC::releasePools() ] → Crash in js::mjit::JITScript::purgePICs @ js::mjit::ic::BasePolyIC::releasePools
Comment 3•11 years ago
|
||
JM is gone.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in
before you can comment on or make changes to this bug.
Description
•