1295051 - Reliable GC crash

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect)

Description

[Eric Rescorla (:ekr)]

Site:
https://www.icloud.com/keynote/0wjMntcaJ69LPnV2MNef-LFrw#2016-08-12--So_Why_Isn%27t_Riding_BART_Free

Crash:
https://crash-stats.mozilla.com/report/index/9be94651-b603-4a59-afc6-7f2a82160814

I have reloaded this page three times and it is reliable each time. Looks like some kind of approximate null pointer exception.

Comment 1

[Andrew McCreight [:mccr8]]

This also crashes for me on OSX, FWIW.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Crash volume for signature 'js::Nursery::collect':
 - nightly (version 51): 2 crashes from 2016-08-01.
 - aurora  (version 50): 0 crashes from 2016-08-01.
 - beta    (version 49): 8 crashes from 2016-08-02.
 - release (version 48): 37 crashes from 2016-07-25.
 - esr     (version 45): 4 crashes from 2016-05-02.

Crash volume on the last weeks (Week N is from 08-22 to 08-28):
            W. N-1  W. N-2  W. N-3
 - nightly       1       1       0
 - aurora        0       0       0
 - beta          1       0       1
 - release      13       6       6
 - esr           1       0       2

Affected platforms: Windows, Mac OS X

Crash rank on the last 7 days:
           Browser   Content     Plugin
 - nightly #706
 - aurora
 - beta    #2227
 - release #1149     #711
 - esr

Comment 3

[Jon Coppeard (:jonco)]

Thanks for filing.  I can't reproduce this on OSX on latest nightly, or on inbound builds on OSX or linux.  Are you still seeing this crash?

Comment 4

[Eric Rescorla (:ekr)]

No, it seems to be fixed. Ugh.

Comment 5

[Jon Coppeard (:jonco)]

Great, we have fixed several things recently that might have been the cause of this.