Crash in [@ js::frontend::TokenStream::getChar ] -> [@ IPCError-browser | ShutDownKill ]

NEW
Unassigned

Status

()

Core
JavaScript Engine
--
critical
2 years ago
4 months ago

People

(Reporter: alex_mayorga, Unassigned)

Tracking

(Blocks: 2 bugs, {crash})

46 Branch
x86
Windows 7
crash
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox46 affected, firefox48 affected, firefox49 affected, firefox-esr52 affected, firefox57 affected, firefox58 affected, firefox59 ?)

Details

(crash signature)

(Reporter)

Description

2 years ago
This bug was filed from the Socorro interface and is 
report bp-2655ec3a-6094-4a76-bc81-7ade72160111.
=============================================================

¡Hola!

RyanVM on #qa suggested this crash is bug worthy so filing it.

Upon restart about:sessionrestore showed and when I clicked "Restore" the tab crashed.

¡Gracias!
Alex

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	js::frontend::TokenStream::getChar() 	js/src/frontend/TokenStream.cpp
1 		@0x6ea5d5f 	
2 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::methodDefinition(js::frontend::YieldHandling, js::frontend::PropertyType, JS::Handle<js::PropertyName*>) 	js/src/frontend/Parser.cpp
3 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::objectLiteral(js::frontend::YieldHandling) 	js/src/frontend/Parser.cpp
4 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::TokenKind, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
5 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::memberExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::TokenKind, bool, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
6 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::unaryExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
7 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr(js::frontend::InHandling, js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
8 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::initializerInNameDeclaration(js::frontend::ParseNode*, js::frontend::ParseNode*, JS::Handle<js::PropertyName*>, js::frontend::BindData<js::frontend::FullParseHandler>*, bool, js::frontend::YieldHandling, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
9 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::declarationName(js::frontend::ParseNode*, js::frontend::TokenKind, js::frontend::BindData<js::frontend::FullParseHandler>*, bool, js::frontend::YieldHandling, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
10 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::declarationList(js::frontend::YieldHandling, js::frontend::ParseNodeKind, js::StaticBlockObject*, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
11 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::statement(js::frontend::YieldHandling, bool) 	js/src/frontend/Parser.cpp
12 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::statements(js::frontend::YieldHandling) 	js/src/frontend/Parser.cpp
13 	xul.dll 	BytecodeCompiler::compileScript(JS::Handle<JSObject*>, JS::Handle<JSScript*>) 	js/src/frontend/BytecodeCompiler.cpp
14 	xul.dll 	js::frontend::CompileScript(js::ExclusiveContext*, js::LifoAlloc*, JS::Handle<JSObject*>, JS::Handle<js::ScopeObject*>, JS::Handle<JSScript*>, JS::ReadOnlyCompileOptions const&, JS::SourceBufferHolder&, JSString*, js::SourceCompressionTask*, js::ScriptSourceObject**) 	js/src/frontend/BytecodeCompiler.cpp
15 	xul.dll 	Compile 	js/src/jsapi.cpp
16 	xul.dll 	Compile 	js/src/jsapi.cpp
17 	xul.dll 	Compile 	js/src/jsapi.cpp
18 	xul.dll 	JS::Compile(JSContext*, JS::ReadOnlyCompileOptions const&, char const*, unsigned __int64, JS::MutableHandle<JSScript*>) 	js/src/jsapi.cpp
19 	xul.dll 	mozJSComponentLoader::ObjectForLocation(ComponentLoaderInfo&, nsIFile*, JS::MutableHandle<JSObject*>, JS::MutableHandle<JSScript*>, char**, bool, JS::MutableHandle<JS::Value>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
20 	xul.dll 	mozJSComponentLoader::ImportInto(nsACString_internal const&, JS::Handle<JSObject*>, JSContext*, JS::MutableHandle<JSObject*>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
21 	xul.dll 	mozJSComponentLoader::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
22 	xul.dll 	nsXPCComponents_Utils::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	js/xpconnect/src/XPCComponents.cpp
23 	xul.dll 	XPTC__InvokebyIndex 	xpcom/reflect/xptcall/md/win32/xptcinvoke_asm_x86_64.asm
24 		@0x34197f 	
25 	xul.dll 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	js/xpconnect/src/XPCWrappedNative.cpp
26 	xul.dll 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
27 		@0xa9b5b1c48f
Updating crash signature to reflect changes to signature generation made in bug 1269817 (although reports older than a week will not be reprocessed), and adding dependency to ShutDownKill metabug.

(These probably shouldn't all be separate bugs, but I'm not going to fix that up in a mass-change.)
Blocks: 1219672
Crash Signature: [@ js::frontend::TokenStream::getChar] → [@ IPCError-browser | ShutDownKill ]
(Reporter)

Comment 3

2 years ago
¡Hola!

Yup! Just 2 crashes in the past week at https://crash-stats.mozilla.com/signature/?product=Firefox&signature=js%3A%3Afrontend%3A%3ATokenStream%3A%3AgetChar though these are on Release and Beta.

¡Gracias!
Alex
status-firefox48: --- → affected
status-firefox49: --- → affected

Updated

5 months ago
Crash Signature: [@ IPCError-browser | ShutDownKill ] → [@ js::frontend::TokenStream::getChar ] [@ IPCError-browser | ShutDownKill ] https://crash-stats.mozilla.com/search/?signature=%3DIPCError-browser%20%7C%20ShutDownKill&proto_signature=~js%3A%3Afrontend%3A%3ATokenStream%3A%3AgetChar&product=Firef&hellip;
status-firefox57: --- → affected
status-firefox58: --- → affected
status-firefox-esr52: --- → affected
Summary: crash in js::frontend::TokenStream::getChar → Crash in [@ js::frontend::TokenStream::getChar ] -> [@ IPCError-browser | ShutDownKill ]

Updated

5 months ago
Crash Signature: [@ js::frontend::TokenStream::getChar ] [@ IPCError-browser | ShutDownKill ] https://crash-stats.mozilla.com/search/?signature=%3DIPCError-browser%20%7C%20ShutDownKill&proto_signature=~js%3A%3Afrontend%3A%3ATokenStream%3A%3AgetChar&product=Firef&hellip; → [@ js::frontend::TokenStream::getChar ] [@ IPCError-browser | ShutDownKill ] https://crash-stats.mozilla.com/signature/?product=Firefox&proto_signature=~js%3A%3Afrontend%3A%3ATokenStream%3A%3AgetChar&signature=IPCError-browser%20%7C%20ShutDownKi&hellip;
You need to log in before you can comment on or make changes to this bug.