Hi,
I'm hoping someone can shed some light on this. I am trying to build Firefox
60.1ESR for s390x. When I install and run it crashes (segfault, core dump). See
the stack trace below.
It is crashing on this statement incrementing a member of this "zone" object.
Should I enter a bug on this?
Thanks
Cheers
Charles Robertson
Thread 1 "firefox" received signal SIGSEGV, Segmentation fault.
js::TenuringTracer::moveToTenured (this=0x3ffffff19f8, src=0x3ffad358ad8) at
/usr/src/debug/mozilla/js/src/gc/Marking.cpp:3226
3226 zone->tenuredStrings++;
(gdb) bt
#0 js::TenuringTracer::moveToTenured (this=0x3ffffff19f8, src=0x3ffad358ad8)
at /usr/src/debug/mozilla/js/src/gc/Marking.cpp:3226
#1 0x000003fff7b8d950 in js::TenuringTracer::traverse<JSString>
(this=<optimized out>, strp=0x2aa0062eb70) at
/usr/src/debug/mozilla/js/src/gc/Marking.cpp:2743
#2 0x000003fff7b8e2e0 in
js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::CellPtrEdge>::trace
(this=this@entry=0x2aa00194030, owner=owner@entry=0x2aa00194010, mover=...)
at /usr/src/debug/mozilla/js/src/gc/Marking.cpp:2770
#3 0x000003fff7b9b7cc in js::gc::StoreBuffer::traceCells (mover=...,
this=0x2aa00194010) at /usr/src/debug/mozilla/js/src/gc/StoreBuffer.h:440
#4 js::Nursery::doCollection (this=0x3ffad3fced8, this@entry=0x2aa00193ce8,
reason=reason@entry=JS::gcreason::API, tenureCounts=...) at
/usr/src/debug/mozilla/js/src/gc/Nursery.cpp:858
#5 0x000003fff7b9c250 in js::Nursery::collect (this=this@entry=0x2aa00193ce8,
reason=<optimized out>) at /usr/src/debug/mozilla/js/src/gc/Nursery.cpp:724
#6 0x000003fff7b621ce in js::gc::GCRuntime::minorGC (this=0x2aa00191b98,
reason=reason@entry=JS::gcreason::OUT_OF_NURSERY,
phase=phase@entry=js::gcstats::PhaseKind::MINOR_GC)
at /usr/src/debug/mozilla/js/src/gc/GC.cpp:7749
#7 0x000003fff7b82222 in js::gc::GCRuntime::minorGC
(phase=js::gcstats::PhaseKind::MINOR_GC, reason=JS::gcreason::OUT_OF_NURSERY,
this=<optimized out>) at /usr/src/debug/mozilla/js/src/gc/Allocator.cpp:47
#8 js::gc::GCRuntime::tryNewNurseryObject<(js::AllowGC)1> (this=<optimized
out>, clasp=0x3fff940d7c0 <JSFunction::class_>, nDynamicSlots=0, thingSize=64,
cx=0x2aa00196320)
at /usr/src/debug/mozilla/js/src/gc/Allocator.cpp:94
#9 js::Allocate<JSObject, (js::AllowGC)1> (cx=0x2aa00196320, kind=<optimized
out>, nDynamicSlots=0, heap=<optimized out>, clasp=0x3fff940d7c0
<JSFunction::class_>)
at /usr/src/debug/mozilla/js/src/gc/Allocator.cpp:56
#10 0x000003fff79f46cc in js::NativeObject::create (group=..., shape=...,
heap=<optimized out>, kind=js::gc::AllocKind::FUNCTION, cx=0x2aa00338570) at
/usr/src/debug/mozilla/js/src/vm/NativeObject-inl.h:538
#11 NewObject (cx=0x2aa00338570, cx@entry=0x3ffad27ba00, group=...,
group@entry=..., kind=kind@entry=js::gc::AllocKind::FUNCTION,
newKind=newKind@entry=js::GenericObject,
initialShapeFlags=initialShapeFlags@entry=0) at
/usr/src/debug/mozilla/js/src/vm/JSObject.cpp:729
#12 0x000003fff79f73f6 in js::NewObjectWithClassProtoCommon (cx=0x3ffad27ba00,
cx@entry=0x2aa00196320, clasp=clasp@entry=0x3fff940d7c0 <JSFunction::class_>,
protoArg=..., protoArg@entry=...,
allocKind=allocKind@entry=js::gc::AllocKind::FUNCTION, newKind=<optimized
out>) at /usr/src/debug/mozilla/js/src/vm/JSObject.cpp:850
#13 0x000003fff79b132a in js::NewObjectWithClassProto
(newKind=js::GenericObject, allocKind=js::gc::AllocKind::FUNCTION, proto=...,
clasp=0x3fff940d7c0 <JSFunction::class_>, cx=0x2aa00196320)
at /usr/src/debug/mozilla/js/src/vm/JSObject-inl.h:677
#14 NewFunctionClone (cx=cx@entry=0x2aa00196320, fun=..., fun@entry=...,
newKind=<optimized out>, allocKind=<optimized out>, proto=..., proto@entry=...)
at /usr/src/debug/mozilla/js/src/vm/JSFunction.cpp:2052
#15 0x000003fff79b4d04 in js::CloneFunctionReuseScript (cx=0x2aa00196320,
cx@entry=0x178, fun=fun@entry=..., enclosingEnv=enclosingEnv@entry=...,
allocKind=allocKind@entry=js::gc::AllocKind::FUNCTION,
newKind=<optimized out>, proto=...) at
/usr/src/debug/mozilla/js/src/vm/JSFunction.cpp:2092
#16 0x000003fff7753c40 in js::CloneFunctionObjectIfNotSingleton (cx=0x178,
fun=..., parent=..., proto=proto@entry=...,
newKind=newKind@entry=js::GenericObject)
at /usr/src/debug/mozilla/js/src/vm/JSFunction-inl.h:89
#17 0x000003fff77542c0 in js::Lambda (cx=<optimized out>, fun=..., parent=...)
at /usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:4439
#18 0x000003fff7759862 in Interpret (cx=0x2aa00196320, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:3637
#19 0x000003fff7760e34 in js::RunScript (cx=<optimized out>, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:418
#20 0x000003fff77612b0 in js::InternalCallOrConstruct (cx=0x2aa00196320,
args=..., construct=<optimized out>) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:490
#21 0x000003fff7754bc6 in js::CallFromStack (args=..., cx=<optimized out>) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:523
#22 Interpret (cx=0x2aa00196320, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:3115
#23 0x000003fff7760e34 in js::RunScript (cx=<optimized out>, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:418
#24 0x000003fff77612b0 in js::InternalCallOrConstruct (cx=0x2aa00196320,
args=..., construct=<optimized out>) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:490
#25 0x000003fff7754bc6 in js::CallFromStack (args=..., cx=<optimized out>) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:523
#26 Interpret (cx=0x2aa00196320, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:3115
#27 0x000003fff7760e34 in js::RunScript (cx=<optimized out>, state=...) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:418
#28 0x000003fff77612b0 in js::InternalCallOrConstruct (cx=0x2aa00196320,
args=..., construct=<optimized out>) at
/usr/src/debug/mozilla/js/src/vm/Interpreter.cpp:490
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
