1310729 - Crash in shutdownhang | js::EqualStrings

Status: REOPENED

(Core :: JavaScript Engine, defect, P3)

Description

[alex_mayorga]

This bug was filed from the Socorro interface and is 
report bp-757f3dab-72c8-4612-acbf-0db6f2161017.
=============================================================

¡Hola!

Got this crash while Nightly was updating this morning.

¡Gracias!
Alex

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	js::EqualStrings(JSLinearString*, JSLinearString*) 	js/src/jsstr.cpp:3191
1 	xul.dll 	SuppressDeletedPropertyHelper<`anonymous namespace'::SingleStringPredicate> 	js/src/jsiter.cpp:1301
2 	xul.dll 	js::SuppressDeletedProperty(JSContext*, JS::Handle<JSObject*>, jsid) 	js/src/jsiter.cpp:1387
3 	xul.dll 	js::NativeDeleteProperty(JSContext*, JS::Handle<js::NativeObject*>, JS::Handle<jsid>, JS::ObjectOpResult&) 	js/src/vm/NativeObject.cpp:2532
4 	xul.dll 	js::DeleteProperty(JSContext*, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::ObjectOpResult&) 	js/src/jsobjinlines.h:234
5 	xul.dll 	js::DeleteElementJit<1>(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, bool*) 	js/src/vm/Interpreter.cpp:4485
6 		@0x25988e313b

Comment 1

[Esther Monchari]

adding ni on:Jan incase he has any ideas?

Comment 2

[Jan de Mooij [:jandem]]

This is not really actionable, also because there are only 1 or 2 reports. We're likely running some JS for too long and we happen to catch this while we're in EqualStrings, but the problem is probably elsewhere.

Comment 3

[Pablo]

Reopening bug since there are crash reports in the last 6 months.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.