Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
Pressing tab for completion in the shell, multiple times in a row in quick succession causes the crash below on Windows (haven't tried on Linux). The shell was started with the --nodb flag. E:\workspace\mongo>mongo.exe --nodb MongoDB shell version: 3.2.0-rc6-7-gb1f0d16 > var r = Repli... 2015-12-03T15:57:27.347-0500 I CONTROL [thread1] *** C runtime error: e:\workspace\mongo\src\third_party\mozjs-38\extract\js\src\jit\jitframes.cpp(361) : Run-Time Check Failure #3 - The variable 'machine' is being used without being initialized., terminating 2015-12-03T15:57:27.380-0500 I - [thread1] Fatal Assertion 17006 Stack: mongo.exe!mongo::fassertFailed(int msgid=17006) Line 171 C++ mongo.exe!mongo::crtDebugCallback(int __formal=1, char * originalMessage=0x0000001b2d4f06a0, int * __formal=0x0000001b2d4f0648) Line 282 C++ msvcr120d.dll!_VCrtDbgReportW(int nRptType=1, void * returnAddress=0x00007ff6fc0c4759, const wchar_t * szFile=0x0000001b2d4f89d0, int nLine=361, const wchar_t * szModule=0x0000001b2d4f87c0, const wchar_t * szFormat=0x00007ff6fcbd2c80, char * arglist=0x0000001b2d4f8798) Line 609 C msvcr120d.dll!_CrtDbgReportWV(int nRptType=1, void * returnAddress=0x00007ff6fc0c4759, const wchar_t * szFile=0x0000001b2d4f89d0, int nLine=361, const wchar_t * szModule=0x0000001b2d4f87c0, const wchar_t * szFormat=0x00007ff6fcbd2c80, char * arglist=0x0000001b2d4f8798) Line 263 C++ msvcr120d.dll!_CrtDbgReportW(int nRptType=1, const wchar_t * szFile=0x0000001b2d4f89d0, int nLine=361, const wchar_t * szModule=0x0000001b2d4f87c0, const wchar_t * szFormat=0x00007ff6fcbd2c80, ...) Line 279 C++ mongo.exe!failwithmessage(void * retaddr=0x00007ff6fb908e61, int crttype=1, int errnum, const char * msg=0x0000001b2d4f9680) Line 203 C++ mongo.exe!_RTC_UninitUse(const char * varname=0x00007ff6fc99e580) Line 475 C++ > mongo.exe!js::jit::JitFrameIterator::machineState() Line 361 C++ mongo.exe!js::jit::SnapshotIterator::SnapshotIterator(const js::jit::JitFrameIterator & iter={...}) Line 1740 C++ mongo.exe!js::jit::InlineFrameIterator::resetOn(const js::jit::JitFrameIterator * iter=0x0000001b2d4fa078) Line 2353 C++ mongo.exe!js::jit::InlineFrameIterator::InlineFrameIterator(JSContext * cx=0x000001f64e0e2b50, const js::jit::JitFrameIterator * iter=0x0000001b2d4fa078) Line 2316 C++ mongo.exe!js::jit::GetPcScript(JSContext * cx=0x000001f64e0e2b50, JSScript * * scriptRes=0x0000001b2d4fa508, unsigned char * * pcRes=0x0000001b2d4fa628) Line 1606 C++ mongo.exe!JSContext::currentScript(unsigned char * * ppc=0x0000001b2d4fa628, JSContext::MaybeAllowCrossCompartment allowCrossCompartment=DONT_ALLOW_CROSS_COMPARTMENT) Line 463 C++ mongo.exe!js::jit::InvokeFunction(JSContext * cx=0x000001f64e0e2b50, JS::Handle obj={...}, unsigned int argc=0, JS::Value * argv=0x0000001b2d4fa7a0, JS::Value * rval=0x0000001b2d4fa760) Line 81 C++
jason.carey commented on Fri, 6 May 2016 21:24:01 +0000: No longer seems reproducible under mozjs-45. Closing as gone away jason.carey commented on Tue, 3 May 2016 19:38:43 +0000: kaloian.manassiev, Can you still repro this using mozjs-45? I.e. latest master? jason.carey commented on Tue, 9 Feb 2016 15:21:45 +0000: Ah, that's interesting. I thought it was debug only. What does a retail crash look like (does it still show up out of the crt, or does it segfault or something like that?) kaloian.manassiev commented on Tue, 9 Feb 2016 03:14:39 +0000: Just for the record, it also happened on retail build previously, so it is not related to debug. Probably now because I was doing it through remote session from home, I was not able to press the tab completion key fast enough jason.carey commented on Tue, 9 Feb 2016 00:00:49 +0000: In the short term, you can use --disableJavaScriptJIT to avoid that behavior on debug builds. In the long term, I'm going to have to work with Mark to trace the callstack back through jitted frames to find out where we went wrong, and there's always the chance that the debug build is just broken (it's definitely broken on non-x86) thomas.schubert commented on Thu, 3 Dec 2015 21:18:45 +0000: I haven't been able to reproduce this on Linux or OS X.
E:\workspace\mongo>mongo.exe --nodb MongoDB shell version: 3.2.0-rc6-7-gb1f0d16 > var r = Repli...