Closed Bug 895864 Opened 11 years ago Closed 11 years ago

Intermittent regress-336409-2.js | Exited with code -2147483645 during test run | application crashed [@ mozilla::RoundUpPow2(unsigned int)] (Assertion failure: ~x > x (can't round up -- will overflow!), at MathAlgorithms.h:422)

Categories

(Core :: MFBT, defect)

x86
Windows 8
defect
Not set
normal

Tracking

()

RESOLVED FIXED
mozilla25
Tracking Status
firefox24 --- unaffected
firefox25 --- fixed

People

(Reporter: RyanVM, Assigned: Waldo)

References

Details

(Keywords: assertion, crash, intermittent-failure)

Crash Data

https://tbpl.mozilla.org/php/getParsedLog.php?id=25452629&tree=Mozilla-Inbound WINNT 6.2 mozilla-inbound debug test jsreftest on 2013-07-18 14:13:55 PDT for push d7af6a55966c slave: t-w864-ix-002 14:25:58 INFO - REFTEST TEST-START | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js 14:25:58 INFO - REFTEST TEST-LOAD | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | 2197 / 6592 (33%) 14:25:58 INFO - ++DOMWINDOW == 251 (16F6A1A0) [serial = 4167] [outer = 08B04558] 14:25:58 INFO - WARNING: No permission to access camera: file e:/builds/moz2_slave/m-in-w32-d-0000000000000000000/build/dom/camera/DOMCameraManager.cpp, line 84 14:25:58 INFO - BUGNUMBER: 336409 14:25:58 INFO - STATUS: Integer overflow in js_obj_toSource 14:25:58 INFO - --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 0 --- 14:25:58 INFO - --- NOTE: IN THIS TESTCASE, WE EXPECT EXIT CODE 5 --- 14:25:58 INFO - STATUS: Creating 128MB string 14:25:58 INFO - STATUS: Done. length = 134217728 14:25:58 INFO - STATUS: Creating object 14:25:58 INFO - STATUS: object.toSource() 14:26:39 INFO - Assertion failure: ~x > x (can't round up -- will overflow!), at e:\builds\moz2_slave\m-in-w32-d-0000000000000000000\build\obj-firefox\dist\include\mozilla/MathAlgorithms.h:422 14:26:40 WARNING - TEST-UNEXPECTED-FAIL | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | Exited with code -2147483645 during test run 14:26:40 INFO - INFO | automation.py | Application ran for: 0:08:57.256000 14:26:40 INFO - INFO | zombiecheck | Reading PID log: c:\users\cltbld~1.t-w\appdata\local\temp\tmpg0xigtpidlog 14:26:47 WARNING - PROCESS-CRASH | file:///C:/slave/test/build/tests/jsreftest/tests/jsreftest.html?test=js1_5/extensions/regress-336409-2.js | application crashed [@ mozilla::RoundUpPow2(unsigned int)] 14:26:47 INFO - Crash dump filename: c:\users\cltbld~1.t-w\appdata\local\temp\tmpq2otr3\minidumps\7d21e2b2-ab26-457c-b72f-673be480dad1.dmp 14:26:47 INFO - Operating system: Windows NT 14:26:47 INFO - 6.2.9200 14:26:47 INFO - CPU: x86 14:26:47 INFO - GenuineIntel family 6 model 30 stepping 5 14:26:47 INFO - 8 CPUs 14:26:47 INFO - Crash reason: EXCEPTION_BREAKPOINT 14:26:47 INFO - Crash address: 0x73d87e13 14:26:47 INFO - Thread 0 (crashed) 14:26:47 INFO - 0 mozjs.dll!mozilla::RoundUpPow2(unsigned int) [MathAlgorithms.h:d7af6a55966c : 422 + 0x40] 14:26:47 INFO - eip = 0x73d87e13 esp = 0x00a0df7c ebp = 0x00a0df7c ebx = 0x40000000 14:26:47 INFO - esi = 0x74821440 edi = 0x80000000 eax = 0x00000000 ecx = 0xa58611a3 14:26:47 INFO - edx = 0x7491e4d8 efl = 0x00000202 14:26:47 INFO - Found by: given as instruction pointer in context 14:26:47 INFO - 1 mozjs.dll!mozilla::detail::VectorImpl<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy>,1>::growTo(mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> > &,unsigned int) [Vector.h:d7af6a55966c : 174 + 0xb] 14:26:47 INFO - eip = 0x73e047fc esp = 0x00a0df84 ebp = 0x00a0df94 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 2 mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::growStorageBy(unsigned int) [Vector.h:d7af6a55966c : 743 + 0x6] 14:26:47 INFO - eip = 0x73e05426 esp = 0x00a0df9c ebp = 0x00a0dfac 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 3 mozjs.dll!mozilla::VectorBase<wchar_t,32,js::ContextAllocPolicy,js::Vector<wchar_t,32,js::ContextAllocPolicy> >::append<wchar_t>(wchar_t const *,wchar_t const *) [Vector.h:d7af6a55966c : 971 + 0x16] 14:26:47 INFO - eip = 0x73e254a1 esp = 0x00a0dfb4 ebp = 0x00a0dfd0 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 4 mozjs.dll!obj_toSource [Object.cpp:d7af6a55966c : 253 + 0x12] 14:26:47 INFO - eip = 0x73e29e20 esp = 0x00a0dfd8 ebp = 0x00a0e1f4 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 5 mozjs.dll!js::CallJSNative(JSContext *,int (*)(JSContext *,unsigned int,JS::Value *),JS::CallArgs const &) [jscntxtinlines.h:d7af6a55966c : 225 + 0xe] 14:26:47 INFO - eip = 0x73df2aaa esp = 0x00a0e1fc ebp = 0x00a0e220 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 6 mozjs.dll!js::Invoke(JSContext *,JS::CallArgs,js::MaybeConstruct) [Interpreter.cpp:d7af6a55966c : 477 + 0xf] 14:26:47 INFO - eip = 0x73dfdb8b esp = 0x00a0e228 ebp = 0x00a0e3ec 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 7 mozjs.dll!Interpret [Interpreter.cpp:d7af6a55966c : 2498 + 0x26] 14:26:47 INFO - eip = 0x73e009fc esp = 0x00a0e3f4 ebp = 0x00a0e888 14:26:47 INFO - Found by: call frame info 14:26:47 INFO - 8 mozjs.dll!js::RunScript(JSContext *,js::RunState &) [Interpreter.cpp:d7af6a55966c : 434 + 0x6] 14:26:47 INFO - eip = 0x73df64c6 esp = 0x00a0e890 ebp = 0x00a0e8b0 14:26:47 INFO - Found by: call frame info
Crash Signature: [@ mozilla::RoundUpPow2(unsigned int)]
Waldo, can you take a look at this please?
Flags: needinfo?(jwalden+bmo)
It's a bad assertion, no untoward consequences, bug 895792 has a patch.
Flags: needinfo?(jwalden+bmo)
Assignee: general → nobody
Component: JavaScript Engine → MFBT
Should have been fixed by bug 895792.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Depends on: 895792
Target Milestone: --- → mozilla25
Assignee: nobody → jwalden+bmo
You need to log in before you can comment on or make changes to this bug.