Closed
Bug 895864
Opened 11 years ago
Closed 11 years ago
Intermittent regress-336409-2.js | Exited with code -2147483645 during test run | application crashed [@ mozilla::RoundUpPow2(unsigned int)] (Assertion failure: ~x > x (can't round up -- will overflow!), at MathAlgorithms.h:422)
Categories
(Core :: MFBT, defect)
Tracking
()
RESOLVED
FIXED
mozilla25
Tracking | Status | |
---|---|---|
firefox24 | --- | unaffected |
firefox25 | --- | fixed |
People
(Reporter: RyanVM, Assigned: Waldo)
References
Details
(Keywords: assertion, crash, intermittent-failure)
Crash Data
https://tbpl.mozilla.org/php/getParsedLog.php?id=25452629&tree=Mozilla-Inbound
WINNT 6.2 mozilla-inbound debug test jsreftest on 2013-07-18 14:13:55 PDT for push d7af6a55966c
slave: t-w864-ix-002
14:25:58 INFO - REFTEST TEST-START | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js
14:25:58 INFO - REFTEST TEST-LOAD | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | 2197 / 6592 (33%)
14:25:58 INFO - ++DOMWINDOW == 251 (16F6A1A0) [serial = 4167] [outer = 08B04558]
14:25:58 INFO - WARNING: No permission to access camera: file e:/builds/moz2_slave/m-in-w32-d-0000000000000000000/build/dom/camera/DOMCameraManager.cpp, line 84
14:25:58 INFO - BUGNUMBER: 336409
14:25:58 INFO - STATUS: Integer overflow in js_obj_toSource
14:25:58 INFO - --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 ---
14:25:58 INFO - --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 ---
14:25:58 INFO - STATUS: Creating 128MB string
14:25:58 INFO - STATUS: Done. length = 134217728
14:25:58 INFO - STATUS: Creating object
14:25:58 INFO - STATUS: object.toSource()
14:26:39 INFO - Assertion failure: ~x > x (can't round up -- will overflow!), at e:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\obj-firefox\dist\include\mozilla/MathAlgorithms.h:422
14:26:40 WARNING - TEST-UNEXPECTED-FAIL | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | Exited with code -2147483645 during test run
14:26:40 INFO - INFO | automation.py | Application ran for: 0:08:57.256000
14:26:40 INFO - INFO | zombiecheck | Reading PID log: c:\users\cltbld~1.t-w\appdata\local\temp\tmpg0xigtpidlog
14:26:47 WARNING - PROCESS-CRASH | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | application crashed [@ mozilla::RoundUpPow2(unsigned int)]
14:26:47 INFO - Crash dump filename: c:\users\cltbld~1.t-w\appdata\local\temp\tmpq2otr3\minidumps\7d21e2b2-ab26-457c-b72f-673be480dad1.dmp
14:26:47 INFO - Operating system: Windows NT
14:26:47 INFO - 6.2.9200
14:26:47 INFO - CPU: x86
14:26:47 INFO - GenuineIntel family 6 model 30 stepping 5
14:26:47 INFO - 8 CPUs
14:26:47 INFO - Crash reason: EXCEPTION_BREAKPOINT
14:26:47 INFO - Crash address: 0x73d87e13
14:26:47 INFO - Thread 0 (crashed)
14:26:47 INFO - 0 mozjs.dll!mozilla::RoundUpPow2(unsigned int) [MathAlgorithms.h:d7af6a55966c : 422 + 0x40]
14:26:47 INFO - eip = 0x73d87e13 esp = 0x00a0df7c ebp = 0x00a0df7c ebx = 0x40000000
14:26:47 INFO - esi = 0x74821440 edi = 0x80000000 eax = 0x00000000 ecx = 0xa58611a3
14:26:47 INFO - edx = 0x7491e4d8 efl = 0x00000202
14:26:47 INFO - Found by: given as instruction pointer in context
14:26:47 INFO - 1 mozjs.dll!mozilla::detail::VectorImpl<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy>,1>::growTo(mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> > &,unsigned int) [Vector.h:d7af6a55966c : 174 + 0xb]
14:26:47 INFO - eip = 0x73e047fc esp = 0x00a0df84 ebp = 0x00a0df94
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 2 mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::growStorageBy(unsigned int) [Vector.h:d7af6a55966c : 743 + 0x6]
14:26:47 INFO - eip = 0x73e05426 esp = 0x00a0df9c ebp = 0x00a0dfac
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 3 mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::append<wchar_t>(wchar_t const *,wchar_t const *) [Vector.h:d7af6a55966c : 971 + 0x16]
14:26:47 INFO - eip = 0x73e254a1 esp = 0x00a0dfb4 ebp = 0x00a0dfd0
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 4 mozjs.dll!obj_toSource [Object.cpp:d7af6a55966c : 253 + 0x12]
14:26:47 INFO - eip = 0x73e29e20 esp = 0x00a0dfd8 ebp = 0x00a0e1f4
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 5 mozjs.dll!js::CallJSNative(JSContext *,int (*)(JSContext *,unsigned int,JS::Value *),JS::CallArgs const &) [jscntxtinlines.h:d7af6a55966c : 225 + 0xe]
14:26:47 INFO - eip = 0x73df2aaa esp = 0x00a0e1fc ebp = 0x00a0e220
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 6 mozjs.dll!js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) [Interpreter.cpp:d7af6a55966c : 477 + 0xf]
14:26:47 INFO - eip = 0x73dfdb8b esp = 0x00a0e228 ebp = 0x00a0e3ec
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 7 mozjs.dll!Interpret [Interpreter.cpp:d7af6a55966c : 2498 + 0x26]
14:26:47 INFO - eip = 0x73e009fc esp = 0x00a0e3f4 ebp = 0x00a0e888
14:26:47 INFO - Found by: call frame info
14:26:47 INFO - 8 mozjs.dll!js::RunScript(JSContext *,js::RunState &) [Interpreter.cpp:d7af6a55966c : 434 + 0x6]
14:26:47 INFO - eip = 0x73df64c6 esp = 0x00a0e890 ebp = 0x00a0e8b0
14:26:47 INFO - Found by: call frame info
Updated•11 years ago
|
Crash Signature: [@ mozilla::RoundUpPow2(unsigned int)]
Reporter | ||
Updated•11 years ago
|
Comment hidden (Legacy TBPL/Treeherder Robot) |
Comment hidden (Legacy TBPL/Treeherder Robot) |
Comment hidden (Legacy TBPL/Treeherder Robot) |
Comment hidden (Legacy TBPL/Treeherder Robot) |
Comment hidden (Legacy TBPL/Treeherder Robot) |
Reporter | ||
Comment 6•11 years ago
|
||
Waldo, can you take a look at this please?
Flags: needinfo?(jwalden+bmo)
Comment hidden (Legacy TBPL/Treeherder Robot) |
Assignee | ||
Comment 8•11 years ago
|
||
It's a bad assertion, no untoward consequences, bug 895792 has a patch.
Flags: needinfo?(jwalden+bmo)
Assignee | ||
Updated•11 years ago
|
Assignee: general → nobody
Component: JavaScript Engine → MFBT
Comment hidden (Legacy TBPL/Treeherder Robot) |
Assignee | ||
Comment 10•11 years ago
|
||
Should have been fixed by bug 895792.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Reporter | ||
Updated•11 years ago
|
You need to log in
before you can comment on or make changes to this bug.
Description
•