1258745 - crash in js::AutoEnterOOMUnsafeRegion::crash | js::gc::StoreBuffer::ValueEdge::trace

Status: RESOLVED WONTFIX

(Core :: JavaScript: GC, defect)

Description

[Calixte Denizet (:calixte)]

This bug was filed from the Socorro interface and is 
report bp-85d41c8e-d085-4d1b-9ad8-a31452160322.
=============================================================

This crash is #36 (with 421 crashes) and occured mainly in beta-46.

Frame 	Module 	Signature 	Source
0 	xul.dll 	js::AutoEnterOOMUnsafeRegion::crash(char const*) 	js/src/jscntxt.cpp
1 	xul.dll 	js::gc::StoreBuffer::ValueEdge::trace(js::TenuringTracer&) 	js/src/gc/Marking.cpp
2 	xul.dll 	js::gc::StoreBuffer::MonoTypeBuffer<js::gc::StoreBuffer::ValueEdge>::trace(js::gc::StoreBuffer*, js::TenuringTracer&) 	js/src/gc/Marking.cpp
3 	xul.dll 	js::Nursery::collect(JSRuntime*, JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0, js::SystemAllocPolicy>*) 	js/src/gc/Nursery.cpp
4 	xul.dll 	js::gc::GCRuntime::minorGCImpl(JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0, js::SystemAllocPolicy>*) 	js/src/jsgc.cpp
5 	xul.dll 	js::gc::GCRuntime::evictNursery(JS::gcreason::Reason) 	js/src/gc/GCRuntime.h
6 	xul.dll 	js::gc::GCRuntime::gcCycle(bool, js::SliceBudget&, JS::gcreason::Reason) 	js/src/jsgc.cpp
7 	xul.dll 	js::gc::GCRuntime::collect(bool, js::SliceBudget, JS::gcreason::Reason) 	js/src/jsgc.cpp
8 	xul.dll 	js::gc::GCRuntime::gc(JSGCInvocationKind, JS::gcreason::Reason) 	js/src/jsgc.cpp

Comment 1

[Calixte Denizet (:calixte)]

99.59% of the crashes occured in 46.0b2

Comment 2

[Jon Coppeard (:jonco)]

This is an out-of-memory situation.

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.