Closed Bug 1322943 Opened 8 years ago Closed 8 years ago

Crash in js::jit::BacktrackingAllocator::buildLivenessInfo

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Platform:
Unspecified
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1322900

People

(Reporter: marcia, Unassigned)

Details

(Keywords: crash) 

This bug was filed from the Socorro interface and is 
report bp-6108b645-79c8-4ea1-8fbf-d5a782161212.
=============================================================

Seen while looking at nightly crash stats: http://bit.ly/2gu0m3f. Started with Build 20161210030206.

Possible regression range: https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=d8f63b2935af0915a6a24b3ea8e27d9a09f66416&tochange=8404d26166a35406f46ff237ed132735c98882b2
I can reproduce this 100% by going to http://graphviz.it/, which uses asm.js on a worker, if that helps.

Running osx 20161214030231
OS: Windows 10 → All
Could reproduce on linux and verified fixed with bug 1322900
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Crash Signature: [@ js::jit::BacktrackingAllocator::buildLivenessInfo]
status-firefox53: affected → ---
You need to log in before you can comment on or make changes to this bug.