Open
Bug 1275855
Opened 9 years ago
Updated 2 years ago
Crash in js::jit::JitcodeGlobalTable::addEntry
Categories
(Core :: JavaScript Engine: JIT, defect)
Tracking
()
People
(Reporter: calixte, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: crash)
Crash Data
This bug was filed from the Socorro interface and is
report bp-d3297eb2-f8ff-4f37-92e3-d14842160526.
=============================================================
Comment 1•9 years ago
|
||
Is it reproducible?
(In reply to Calixte Denizet (:calixte) from comment #0)
> This bug was filed from the Socorro interface and is
> report bp-d3297eb2-f8ff-4f37-92e3-d14842160526.
> =============================================================
0 xul.dll js::jit::JitcodeGlobalTable::addEntry(js::jit::JitcodeGlobalEntry const&, JSRuntime*) js/src/jit/JitcodeMap.cpp:547
1 xul.dll js::jit::JitcodeGlobalTable::addEntry(js::jit::JitcodeGlobalEntry::DummyEntry const&, JSRuntime*) js/src/jit/JitcodeMap.h:1051
2 xul.dll js::jit::IonCache::linkAndAttachStub(JSContext*, js::jit::MacroAssembler&, js::jit::IonCache::StubAttacher&, js::jit::IonScript*, char const*, JS::TrackedOutcome) js/src/jit/IonCaches.cpp:357
3 xul.dll js::jit::GetPropertyIC::tryAttachNative(JSContext*, JS::Handle<JSScript*>, js::jit::IonScript*, JS::Handle<JSObject*>, JS::Handle<jsid>, void*, bool*) js/src/jit/IonCaches.cpp:1518
4 xul.dll js::jit::GetPropertyIC::tryAttachStub(JSContext*, JS::Handle<JSScript*>, js::jit::IonScript*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, bool*) js/src/jit/IonCaches.cpp:2182
5 xul.dll js::jit::GetPropertyIC::update(JSContext*, JS::Handle<JSScript*>, unsigned int, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>) js/src/jit/IonCaches.cpp:2238
Flags: needinfo?(cdenizet)
Comment 3•9 years ago
|
||
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry':
- nightly(version 50):6 crashes from 2016-06-06.
- aurora (version 49):19 crashes from 2016-06-07.
- beta (version 48):345 crashes from 2016-06-06.
- release(version 47):847 crashes from 2016-05-31.
- esr (version 45):36 crashes from 2016-04-07.
Crash volume on the last weeks:
W. N-1 W. N-2 W. N-3 W. N-4 W. N-5 W. N-6 W. N-7
- nightly 2 0 3 1 0 0 0
- aurora 3 2 0 2 6 3 2
- beta 47 43 53 44 59 45 42
- release 118 105 130 106 124 116 111
- esr 7 1 2 4 2 1 0
Affected platforms: Windows, Mac OS X, Linux
status-firefox50:
--- → affected
Comment 4•8 years ago
|
||
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry':
- nightly (version 51): 2 crashes from 2016-08-01.
- aurora (version 50): 6 crashes from 2016-08-01.
- beta (version 49): 176 crashes from 2016-08-02.
- release (version 48): 114 crashes from 2016-07-25.
- esr (version 45): 39 crashes from 2016-05-02.
Crash volume on the last weeks (Week N is from 08-22 to 08-28):
W. N-1 W. N-2 W. N-3
- nightly 1 1 0
- aurora 2 3 0
- beta 53 62 16
- release 31 43 14
- esr 5 2 3
Affected platforms: Windows, Mac OS X, Linux
Crash rank on the last 7 days:
Browser Content Plugin
- nightly #549
- aurora #808
- beta #323 #170
- release #532
- esr #1754
status-firefox51:
--- → affected
Comment 5•8 years ago
|
||
Crash volume for signature 'js::jit::JitcodeGlobalTable::addEntry':
- nightly (version 54): 0 crashes from 2017-01-23.
- aurora (version 53): 0 crashes from 2017-01-23.
- beta (version 52): 118 crashes from 2017-01-23.
- release (version 51): 323 crashes from 2017-01-16.
- esr (version 45): 91 crashes from 2016-08-10.
Crash volume on the last weeks (Week N is from 02-06 to 02-12):
W. N-1 W. N-2 W. N-3 W. N-4 W. N-5 W. N-6 W. N-7
- nightly 0 0
- aurora 0 0
- beta 63 20
- release 214 46 0
- esr 3 6 8 4 0 2 1
Affected platforms: Windows, Mac OS X
Crash rank on the last 7 days:
Browser Content Plugin
- nightly
- aurora
- beta #351 #123
- release #390 #212
- esr #1656
status-firefox52:
--- → affected
Comment 6•8 years ago
|
||
Too late for firefox 52, mass-wontfix.
Updated•3 years ago
|
Blocks: sm-defects-crashes
Updated•2 years ago
|
Severity: critical → S2
Comment 7•2 years ago
|
||
Since the crash volume is low (less than 5 per week), the severity is downgraded to S3
. Feel free to change it back if you think the bug is still critical.
For more information, please visit auto_nag documentation.
Severity: S2 → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•