Closed Bug 1199764 Opened 9 years ago Closed 9 years ago

crash in js::CloneFunctionObjectIfNotSingleton(JSContext*, JS::Handle<T>, JS::Handle<T>, JS::Handle<T>, js::NewObjectKind)

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
41 Branch
Platform:
x86
Windows NT
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1177898
Tracking Flags:
Tracking Status
firefox41 --- affected

People

(Reporter: away, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-006cdf57-73e5-4bcd-9d27-673922150827.
=============================================================

This is a moderately-high crash on 41 beta.

getOrCreateScript() returned null at http://hg.mozilla.org/releases/mozilla-beta/annotate/c95314d6c388/js/src/jsfuninlines.h#l92

 # ChildEBP RetAddr  
00 003cb78c 5235e30f xul!js::CloneFunctionObjectIfNotSingleton+0x28b
01 003cb7ac 523736ed xul!js::Lambda+0x1f
02 003cc620 528c7d06 xul!Interpret+0xad8d
03 003cc660 52364238 xul!js::RunScript+0x1b6
04 003cc704 526b630c xul!js::Invoke+0x168
05 003cc744 52364184 xul!js::fun_call+0xc9
06 003cc7ec 523725e8 xul!js::Invoke+0xb4
07 003cd658 528c7d06 xul!Interpret+0x9c88
Flags: needinfo?(shu)
status-firefox41: --- → affected
Status: NEW → RESOLVED
Closed: 9 years ago
Flags: needinfo?(shu)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.