1489952 - Crash in js::InternalBarrierMethods<T>::readBarrier

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P5)

Description

[Gabriele Svelto [:gsvelto]]

This bug was filed from the Socorro interface and is
report bp-e37826c4-a2b0-47f0-bac2-6ec4b0180910.
=============================================================

Top 10 frames of crashing thread:

0 libxul.so js::InternalBarrierMethods<JSObject*>::readBarrier js/public/HeapAPI.h:169
1 libxul.so JSCompartment::getOrCreateWrapper js/public/Value.h:1374
2 libxul.so JSCompartment::wrap js/src/vm/JSCompartment.cpp:469
3 libxul.so mozilla::dom::GetPerInterfaceObjectHandle dom/bindings/BindingUtils.cpp:4077
4 libxul.so JS_WrapObject js/src/jsapi.cpp:783
5 libxul.so mozilla::dom::XrayGetNativeProto dom/bindings/BindingUtils.h:2534
6 libxul.so xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::DOMXrayTraits>::getPrototype 
7 libxul.so wcsrtombs 
8 libxul.so xpc::DOMXrayTraits::delete_ 
9 libxul.so js::Proxy::get js/src/proxy/Proxy.cpp:195

=============================================================

Comment 1

[Andrew McCreight [:mccr8]]

Looking at the proto signatures, this is a fairly generic signature.

It looks like there was a bit of a spike on Android Nightly (9, plus 3 on beta) of this signature, such as bp-7681ac5f-ac21-4549-a0f2-74d180180908

For those, the second frame is
js::ArgumentsObject* js::ArgumentsObject::create<CopyFrameArgs>(JSContext*, JS::Handle<JSFunction*>, unsigned int, CopyFrameArgs&)

and that's it.

Comment 2

[Intermittent Failures Robot]

2 failures in 2808 pushes (0.001 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:
* autoland: 2

Platform breakdown:
* osx-10-10: 2

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1489952&startday=2018-11-26&endday=2018-12-02&tree=all

Comment 3

[Intermittent Failures Robot]

1 failures in 2648 pushes (0.0 failures/push) were associated with this bug in the last 7 days.

Repository breakdown:
* autoland: 1

Platform breakdown:
* windows7-32: 1

For more details, see:
https://treeherder.mozilla.org/intermittent-failures.html#/bugdetails?bug=1489952&startday=2018-12-17&endday=2018-12-23&tree=all

Comment 4

[Jon Coppeard (:jonco)]

This is a low volume crash. The intermittent failure reports above are not related and are due to the problem fixed by bug 1480121.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.