Closed Bug 1170651 Opened 9 years ago Closed 9 years ago

crash in js::jit::GetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, unsigned int, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
All
Android
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INCOMPLETE
Tracking Flags:
Tracking Status
firefox38 --- wontfix
firefox38.0.5 --- wontfix
firefox39 + wontfix
firefox40 - affected
firefox41 - affected
fennec 41+ ---

People

(Reporter: kbrosnan, Assigned: kbrosnan)

Details

(Keywords: crash, topcrash-android-armv7)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-7eb4cee4-01ad-46cb-a52f-3ecee2150526.
=============================================================

Topcrash in Firefox for Android 39 beta 1. Need to do some investigation into URLs.
Tracking for 39, 40, 41 because Topcrash in 39.
tracking-firefox39: ? → +
tracking-firefox40: ? → +
tracking-firefox41: ? → +
Hi Kevin, 
Any updates? It is currently #6 TopCrash in Firefox for Android 39.0b1, 39.0b2.
Flags: needinfo?(kbrosnan)
Not device specific. Uptimes are evenly distributed. Crashes per install are near 1:1 suggesting that this is not reproducible. URLs look unhelpful, no clustering. Will try loading some of the one off URLs on a Nexus 5.
Loaded URLs from crashes in the last 28 days. No crashes.
Flags: needinfo?(kbrosnan)
Naveed - Thoughts? Assignee?
Flags: needinfo?(nihsanullah)
Crash Signature: [@ js::jit::GetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, unsigned int, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)] → [@ js::jit::GetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, unsigned int, JS::Handle<JSObject*>, JS::MutableHandle<JS::Value>)] [@ js::jit::GetPropertyIC::update(JSContext*, JS::Handle<T>, unsigned int, JS::Handle<T>, JS::MutableHandle<T>) ] [@…
Jan can you please have someone look at this.
Flags: needinfo?(nihsanullah) → needinfo?(jdemooij)
Too late for 39. We should make sure to check if this is still an issue for 40+ .
status-firefox39: affected → wontfix
Nicolas, do you see who could help here? Thanks
status-firefox38: affected → wontfix
status-firefox38.0.5: affected → wontfix
Flags: needinfo?(nicolas.b.pierron)
tracking-fennec: ? → 40+
Sorry for the late response.

I looked at crash-stats and there's not a lot of actionable info. Most URLs are about:blank. We're crashing somewhere because we have a nullptr IonScript, it's hard to say what could have caused that.

Also no crashes on 40/41/42 that look related, so I think it makes sense to assume this went away until evidence shows otherwise..
Flags: needinfo?(nicolas.b.pierron)
Flags: needinfo?(jdemooij)
OK, thanks. Let's untrack it. please resubmit if it comes back.
tracking-firefox40: + → -
tracking-firefox41: + → -
Kevin, do you agree that this has gone down? You mentioned that there were several signatures in the eng stand up
Flags: needinfo?(kbrosnan)
This is still in the top 10 crashes on release with the [@ js::jit::GetPropertyIC::update(JSContext*, JS::Handle<T>, unsigned int, JS::Handle<T>, JS::MutableHandle<T>) ] signature. The beta, aurora and nightly crashes are near nonexistent though this might be something that only shows up on release channels.
Flags: needinfo?(kbrosnan)
Whiteboard: [closeme 2015-10-01]
Moving to tracking 41. If this signature goes away when 40 goes to release, then we'll close this out. Otherwise we'll have to fix it while 41 is on beta.
tracking-fennec: 40+ → 41+
Assignee: nobody → kbrosnan
Resolved per whiteboard
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
Whiteboard: [closeme 2015-10-01]
You need to log in before you can comment on or make changes to this bug.