Closed Bug 1265414 Opened 8 years ago Closed 8 years ago

crash in js::gc::GCRuntime::markBufferedGrayRoots

Categories

(Core :: JavaScript: GC, defect)

Unspecified
All
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1280591

People

(Reporter: milan, Unassigned)

Details

(Keywords: crash)

This bug was filed from the Socorro interface and is 
report bp-a9783868-836a-4aae-a12a-df54b2160416.
=============================================================

~3000 in the past week, majority on OS X, but across multiple platforms from what I can tell.  This particular crash was mine, Macbook Air, just scrolling Facebook.
It looks like null pointer dereference marking the buffered gray roots, but we would crash if we attempted to add a null cell pointer to the gray root buffer because we call zone() on it first.
I've hit this as well.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Crash Signature: [@ js::gc::GCRuntime::markBufferedGrayRoots]
You need to log in before you can comment on or make changes to this bug.