Open Bug 1275855 Opened 9 years ago Updated 2 years ago

Crash in js::jit::JitcodeGlobalTable::addEntry

Categories

(Core :: JavaScript Engine: JIT, defect)

x86
All
defect

Tracking

()

Tracking Status
firefox46 --- affected
firefox47 --- affected
firefox48 --- affected
firefox49 --- affected
firefox-esr45 --- affected
firefox50 --- affected
firefox51 --- affected
firefox52 --- wontfix

People

(Reporter: calixte, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is report bp-d3297eb2-f8ff-4f37-92e3-d14842160526. =============================================================
Is it reproducible? (In reply to Calixte Denizet (:calixte) from comment #0) > This bug was filed from the Socorro interface and is > report bp-d3297eb2-f8ff-4f37-92e3-d14842160526. > ============================================================= 0 xul.dll js::jit::JitcodeGlobalTable::addEntry(js::jit::JitcodeGlobalEntry const&, JSRuntime*) js/src/jit/JitcodeMap.cpp:547 1 xul.dll js::jit::JitcodeGlobalTable::addEntry(js::jit::JitcodeGlobalEntry::DummyEntry const&, JSRuntime*) js/src/jit/JitcodeMap.h:1051 2 xul.dll js::jit::IonCache::linkAndAttachStub(JSContext*, js::jit::MacroAssembler&, js::jit::IonCache::StubAttacher&, js::jit::IonScript*, char const*, JS::TrackedOutcome) js/src/jit/IonCaches.cpp:357 3 xul.dll js::jit::GetPropertyIC::tryAttachNative(JSContext*, JS::Handle<JSScript*>, js::jit::IonScript*, JS::Handle<JSObject*>, JS::Handle<jsid>, void*, bool*) js/src/jit/IonCaches.cpp:1518 4 xul.dll js::jit::GetPropertyIC::tryAttachStub(JSContext*, JS::Handle<JSScript*>, js::jit::IonScript*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, bool*) js/src/jit/IonCaches.cpp:2182 5 xul.dll js::jit::GetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, unsigned int, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>) js/src/jit/IonCaches.cpp:2238
Flags: needinfo?(cdenizet)
I don't know.
Flags: needinfo?(cdenizet)
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry': - nightly(version 50):6 crashes from 2016-06-06. - aurora (version 49):19 crashes from 2016-06-07. - beta (version 48):345 crashes from 2016-06-06. - release(version 47):847 crashes from 2016-05-31. - esr (version 45):36 crashes from 2016-04-07. Crash volume on the last weeks: W. N-1 W. N-2 W. N-3 W. N-4 W. N-5 W. N-6 W. N-7 - nightly 2 0 3 1 0 0 0 - aurora 3 2 0 2 6 3 2 - beta 47 43 53 44 59 45 42 - release 118 105 130 106 124 116 111 - esr 7 1 2 4 2 1 0 Affected platforms: Windows, Mac OS X, Linux
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry': - nightly (version 51): 2 crashes from 2016-08-01. - aurora (version 50): 6 crashes from 2016-08-01. - beta (version 49): 176 crashes from 2016-08-02. - release (version 48): 114 crashes from 2016-07-25. - esr (version 45): 39 crashes from 2016-05-02. Crash volume on the last weeks (Week N is from 08-22 to 08-28): W. N-1 W. N-2 W. N-3 - nightly 1 1 0 - aurora 2 3 0 - beta 53 62 16 - release 31 43 14 - esr 5 2 3 Affected platforms: Windows, Mac OS X, Linux Crash rank on the last 7 days: Browser Content Plugin - nightly #549 - aurora #808 - beta #323 #170 - release #532 - esr #1754
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry': - nightly (version 54): 0 crashes from 2017-01-23. - aurora (version 53): 0 crashes from 2017-01-23. - beta (version 52): 118 crashes from 2017-01-23. - release (version 51): 323 crashes from 2017-01-16. - esr (version 45): 91 crashes from 2016-08-10. Crash volume on the last weeks (Week N is from 02-06 to 02-12): W. N-1 W. N-2 W. N-3 W. N-4 W. N-5 W. N-6 W. N-7 - nightly 0 0 - aurora 0 0 - beta 63 20 - release 214 46 0 - esr 3 6 8 4 0 2 1 Affected platforms: Windows, Mac OS X Crash rank on the last 7 days: Browser Content Plugin - nightly - aurora - beta #351 #123 - release #390 #212 - esr #1656
Too late for firefox 52, mass-wontfix.
QA Whiteboard: qa-not-actionable
Severity: critical → S2

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Severity: S2 → S3
You need to log in before you can comment on or make changes to this bug.