1238657 - Crash in [@ js::frontend::TokenStream::getChar ] -> [@ IPCError-browser | ShutDownKill ]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-2655ec3a-6094-4a76-bc81-7ade72160111.
=============================================================

¡Hola!

RyanVM on #qa suggested this crash is bug worthy so filing it.

Upon restart about:sessionrestore showed and when I clicked "Restore" the tab crashed.

¡Gracias!
Alex

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	js::frontend::TokenStream::getChar() 	js/src/frontend/TokenStream.cpp
1 		@0x6ea5d5f 	
2 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::methodDefinition(js::frontend::YieldHandling, js::frontend::PropertyType, JS::Handle<js::PropertyName*>) 	js/src/frontend/Parser.cpp
3 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::objectLiteral(js::frontend::YieldHandling) 	js/src/frontend/Parser.cpp
4 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::TokenKind, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
5 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::memberExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::TokenKind, bool, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
6 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::unaryExpr(js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
7 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::assignExpr(js::frontend::InHandling, js::frontend::YieldHandling, js::frontend::TripledotHandling, js::frontend::Parser<js::frontend::FullParseHandler>::InvokedPrediction) 	js/src/frontend/Parser.cpp
8 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::initializerInNameDeclaration(js::frontend::ParseNode*, js::frontend::ParseNode*, JS::Handle<js::PropertyName*>, js::frontend::BindData<js::frontend::FullParseHandler>*, bool, js::frontend::YieldHandling, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
9 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::declarationName(js::frontend::ParseNode*, js::frontend::TokenKind, js::frontend::BindData<js::frontend::FullParseHandler>*, bool, js::frontend::YieldHandling, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
10 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::declarationList(js::frontend::YieldHandling, js::frontend::ParseNodeKind, js::StaticBlockObject*, js::frontend::ParseNodeKind*, js::frontend::ParseNode**) 	js/src/frontend/Parser.cpp
11 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::statement(js::frontend::YieldHandling, bool) 	js/src/frontend/Parser.cpp
12 	xul.dll 	js::frontend::Parser<js::frontend::FullParseHandler>::statements(js::frontend::YieldHandling) 	js/src/frontend/Parser.cpp
13 	xul.dll 	BytecodeCompiler::compileScript(JS::Handle<JSObject*>, JS::Handle<JSScript*>) 	js/src/frontend/BytecodeCompiler.cpp
14 	xul.dll 	js::frontend::CompileScript(js::ExclusiveContext*, js::LifoAlloc*, JS::Handle<JSObject*>, JS::Handle<js::ScopeObject*>, JS::Handle<JSScript*>, JS::ReadOnlyCompileOptions const&, JS::SourceBufferHolder&, JSString*, js::SourceCompressionTask*, js::ScriptSourceObject**) 	js/src/frontend/BytecodeCompiler.cpp
15 	xul.dll 	Compile 	js/src/jsapi.cpp
16 	xul.dll 	Compile 	js/src/jsapi.cpp
17 	xul.dll 	Compile 	js/src/jsapi.cpp
18 	xul.dll 	JS::Compile(JSContext*, JS::ReadOnlyCompileOptions const&, char const*, unsigned __int64, JS::MutableHandle<JSScript*>) 	js/src/jsapi.cpp
19 	xul.dll 	mozJSComponentLoader::ObjectForLocation(ComponentLoaderInfo&, nsIFile*, JS::MutableHandle<JSObject*>, JS::MutableHandle<JSScript*>, char**, bool, JS::MutableHandle<JS::Value>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
20 	xul.dll 	mozJSComponentLoader::ImportInto(nsACString_internal const&, JS::Handle<JSObject*>, JSContext*, JS::MutableHandle<JSObject*>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
21 	xul.dll 	mozJSComponentLoader::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	js/xpconnect/loader/mozJSComponentLoader.cpp
22 	xul.dll 	nsXPCComponents_Utils::Import(nsACString_internal const&, JS::Handle<JS::Value>, JSContext*, unsigned char, JS::MutableHandle<JS::Value>) 	js/xpconnect/src/XPCComponents.cpp
23 	xul.dll 	XPTC__InvokebyIndex 	xpcom/reflect/xptcall/md/win32/xptcinvoke_asm_x86_64.asm
24 		@0x34197f 	
25 	xul.dll 	XPCWrappedNative::CallMethod(XPCCallContext&, XPCWrappedNative::CallMode) 	js/xpconnect/src/XPCWrappedNative.cpp
26 	xul.dll 	XPC_WN_CallMethod(JSContext*, unsigned int, JS::Value*) 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp
27 		@0xa9b5b1c48f

Comment 1

[David Baron :dbaron: (⌚️UTC-5, no longer working on Mozilla)]

Updating crash signature to reflect changes to signature generation made in bug 1269817 (although reports older than a week will not be reprocessed), and adding dependency to ShutDownKill metabug.

(These probably shouldn't all be separate bugs, but I'm not going to fix that up in a mass-change.)

Comment 2

[Jim Mathies [:jimm]]

Currently 1 crash showing up, low volume.

https://crash-stats.mozilla.com/search/?product=Firefox&signature=%3DIPCError-browser%20%7C%20ShutDownKill&proto_signature=~TokenStream&_facets=signature&_facets=proto_signature&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#facet-proto_signature

Comment 3

[alex_mayorga]

¡Hola!

Yup! Just 2 crashes in the past week at https://crash-stats.mozilla.com/signature/?product=Firefox&signature=js%3A%3Afrontend%3A%3ATokenStream%3A%3AgetChar though these are on Release and Beta.

¡Gracias!
Alex

Comment 4

[Firefox Bug Husbandry Bot]

https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Update_affecteds

Comment 5

[BugBot [:suhaib / :marco]]

Closing because no crashes reported for 12 weeks.