Crash in js::ScriptedProxyHandler::construct

NEW
Unassigned

Status

()

P3
critical
2 years ago
11 months ago

People

(Reporter: ashughes, Unassigned)

Tracking

({crash, triage-deferred})

49 Branch
Unspecified
Android
crash, triage-deferred
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

(Reporter)

Description

2 years ago
This bug was filed from the Socorro interface and is 
report bp-ad519021-9fe1-4d66-a0f7-c32082161105.
=============================================================
0 		@0xd2133fd8 	
1 	libxul.so 	js::ScriptedProxyHandler::construct 	js/public/RootingAPI.h:670
2 		@0x7 	
3 	libxul.so 	js::gc::GCRuntime::refillFreeListFromAnyThread 	js/src/gc/Allocator.cpp:319
4 	libxul.so 	js::Allocate<JSObject, (js::AllowGC)0u> 	js/src/gc/Allocator.cpp:160
5 	libxul.so 	js::NewObjectWithGivenTaggedProto 	js/src/jsutil.h:44
6 	libxul.so 	js::NewObjectWithClassProtoCommon 	js/src/jsobj.cpp:762
7 		@0xd667428e 	
8 	libxul.so 	js::jit::IonCannon 	js/src/jit/Ion.cpp:2791
9 	libxul.so 	js::RunScript 	js/src/vm/Interpreter.cpp:378
10 	libxul.so 	js::InternalCallOrConstruct 	js/src/vm/Interpreter.cpp:470
11 	libxul.so 	js::Call 	js/src/vm/Interpreter.cpp:516
12 	libxul.so 	js::Wrapper::call 	js/src/proxy/Wrapper.cpp:165
13 	libxul.so 	js::CrossCompartmentWrapper::call 	js/src/proxy/CrossCompartmentWrapper.cpp:313
14 	libxul.so 	js::proxy_Call 	js/src/proxy/Proxy.cpp:401
15 	libxul.so 	js::InternalCallOrConstruct 	js/src/jscntxtinlines.h:240
16 	libxul.so 	js::jit::DoCallFallback 	js/src/jit/BaselineIC.cpp:5979
17 		@0xd27c53ea 	
18 	libxul.so 	__aeabi_fcmpgt 	
19 	libxul.so 	js::EmptyShape::getInitialShape 	js/src/gc/Barrier.h:564
20 		@0xeed3def6 	
21 	libxul.so 	EnterBaseline 	js/src/jit/BaselineJIT.cpp:156
22 	libxul.so 	js::jit::EnterBaselineMethod 	js/src/jit/BaselineJIT.cpp:194
23 	libxul.so 	js::RunScript 	js/src/vm/Interpreter.cpp:388
24 	libxul.so 	js::InternalCallOrConstruct 	js/src/vm/Interpreter.cpp:470
25 	libxul.so 	js::Call 	js/src/vm/Interpreter.cpp:516
26 	libxul.so 	js::Wrapper::call 	js/src/proxy/Wrapper.cpp:165
27 	libxul.so 	js::CrossCompartmentWrapper::call 	js/src/proxy/CrossCompartmentWrapper.cpp:313
28 	libxul.so 	js::proxy_Call 	js/src/proxy/Proxy.cpp:401
29 	libxul.so 	js::InternalCallOrConstruct 	js/src/jscntxtinlines.h:240
30 	libxul.so 	js::jit::DoCallFallback 	js/src/jit/BaselineIC.cpp:5979
31 		@0xd27c53ea 	
32 	libxul.so 	__aeabi_fcmpgt 	
=============================================================
More reports: https://crash-stats.mozilla.com/signature/?product=FennecAndroid&signature=js%3A%3AScriptedProxyHandler%3A%3Aconstruct

My partner hit this crash a few days ago on his Samsung Galaxy S6 Edge. He wasn't doing anything of interest. Firefox was running in the background for a couple hours and it crashed when he switched back to the running instance.
(Reporter)

Updated

2 years ago
Version: unspecified → 49 Branch
Thanks for filing.

This is a low volume crash with only 11 reported instances, all on Fennec version 49.

The line this crashes at (RootingAPI.h:670) has been removed in bug 1294404 in version 51 so it's *possible* this is fixed.
Keywords: triage-deferred
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.