Closed Bug 1031036 Opened 10 years ago Closed 7 years ago

Crashes at js::StringObject::init | js::PrimitiveToObject | js::jit::DoGetPropFallback

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Platform:
All
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: smichaud, Unassigned)

Details

(Keywords: topcrash-mac)

Crash Data

https://crash-stats.mozilla.com/report/list?signature=js%3A%3AStringObject%3A%3Ainit%28JSContext%2A%2C+JS%3A%3AHandle%3CJSString%2A%3E%29&product=Firefox&query_type=contains&range_unit=weeks&process_type=any&hang_type=any&date=2014-06-26+22%3A00%3A00&range_value=4#reports

This is a very old (and seldom encountered) crash on Windows.  But it's started up very recently on the Mac, and in relatively large numbers (apparently with the 2014-06-20 m-c nightly).

These are currently the #4 Mac topcrasher on the 33 branch.
Implied regression range:

firefox-2014-06-19-03-02-03-mozilla-central
firefox-2014-06-20-03-02-01-mozilla-central

http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=f78e532e8a10&tochange=bdac18bd6c74
Crash Signature: [@ js::StringObject::init(JSContext*, JS::Handle<JSString*>) ] → [@ js::StringObject::init(JSContext*, JS::Handle<JSString*>) ] [@ js::StringObject::init ]
I see only 1 crash on ESR52 with StringObject::init. Let's close this.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
(In reply to Jan de Mooij [:jandem] from comment #2)
> I see only 1 crash on ESR52 with StringObject::init. Let's close this.

I meant to say: in the past month.
You need to log in before you can comment on or make changes to this bug.