Closed Bug 1267686 Opened 9 years ago Closed 3 years ago

crash in js::GCMarker::markAndTraceChildren<T>

Categories

(Core :: JavaScript: GC, defect)

Product:
Core
Component:
JavaScript: GC
Version:
46 Branch
Platform:
All
Windows
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
firefox46 --- affected
firefox47 --- affected
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected

People

(Reporter: marco, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, Whiteboard: qa-not-actionable)

Crash Data

This bug was filed from the Socorro interface and is report bp-eb9e41fe-3ac7-49a9-9ea3-a05062160426. ============================================================= Filing this bug because there is no associated report to that signature yet. #23 top crasher (with 806 crashes) on Firefox 46. This crash first appeared on 2015-07-15, but seems to affect Firefox 46 more than Firefox 45.
In release, the crash is spiking since 2016-05-05 (increased by ~200% until 2016-05-08) and is #33 in top-crashes for 46.0.1.
Flags: needinfo?(terrence)
Nothing has changed in the GC in this area in ages. This is either a new UAF error in gecko or an inlining change. Have any other GC tracing signatures dropped precipitously in the same time frame?
Flags: needinfo?(terrence)
Crash volume for signature 'js::GCMarker::markAndTraceChildren<T>': - nightly (version 50): 5 crashes from 2016-06-06. - aurora (version 49): 25 crashes from 2016-06-07. - beta (version 48): 440 crashes from 2016-06-06. - release (version 47): 554 crashes from 2016-05-31. - esr (version 45): 41 crashes from 2016-04-07. Crash volume on the last weeks: Week N-1 Week N-2 Week N-3 Week N-4 Week N-5 Week N-6 Week N-7 - nightly 0 2 0 0 1 0 0 - aurora 4 0 3 6 5 6 0 - beta 79 53 67 87 57 54 15 - release 104 66 94 87 85 69 22 - esr 4 5 8 2 0 2 4 Affected platforms: Windows, Linux
status-firefox50: --- → affected
status-firefox-esr45: --- → affected
Crash volume for signature 'js::GCMarker::markAndTraceChildren<T>': - nightly (version 52): 0 crashes from 2016-09-19. - aurora (version 51): 2 crashes from 2016-09-19. - beta (version 50): 270 crashes from 2016-09-20. - release (version 49): 929 crashes from 2016-09-05. - esr (version 45): 67 crashes from 2016-07-25. Crash volume on the last weeks (Week N is from 10-17 to 10-23): W. N-1 W. N-2 W. N-3 W. N-4 - nightly 0 0 0 0 - aurora 0 2 0 0 - beta 73 74 74 6 - release 304 238 232 72 - esr 7 7 7 6 Affected platforms: Windows, Linux Crash rank on the last 7 days: Browser Content Plugin - nightly - aurora #385 - beta #158 #210 - release #273 #138 - esr #1168
status-firefox51: --- → affected
Keywords: topcrash-win

Reopening bug since there are crash reports in the last 6 months.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
Whiteboard: qa-not-actionable

Closing because no crashes reported for 12 weeks.

Status: REOPENED → RESOLVED
Closed: 4 years ago → 3 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.