1194746 - crash in js::ObjectGroup::defaultNewGroup(js::ExclusiveContext*, js::Class const*, js::TaggedProto, JSObject*)

Status: RESOLVED WONTFIX

(Core :: JavaScript Engine, defect)

Description

[Benjamin Bouvier [:bbouvier] (inactive)]

This bug was filed from the Socorro interface and is 
report bp-be95f029-344b-4ca9-b5b9-3a49e2150813.
=============================================================

Was doing nothing in particular, just opened a new tab with Glowing Bear: http://www.glowing-bear.org

cc'ing bhackett because crash in type inference, jorendorff because proxies.

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'js::ObjectGroup::defaultNewGroup':
 - nightly (version 51): 0 crashes from 2016-08-01.
 - aurora  (version 50): 8 crashes from 2016-08-01.
 - beta    (version 49): 52 crashes from 2016-08-02.
 - release (version 48): 34 crashes from 2016-07-25.
 - esr     (version 45): 7 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       0       0       0
 - aurora        0       0       8
 - beta         10      13       1
 - release      13       6       4
 - esr           0       0       0

Affected platforms: Windows, Mac OS X, Linux

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly
 - aurora
 - beta    #529      #485
 - release #1523
 - esr

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 3

[Iain Ireland [:iain]]

This code no longer exists.