Closed Bug 1332175 Opened 7 years ago Closed 2 years ago

Crash in js::DispatchTyped<T>

Categories

(Core :: JavaScript: GC, defect, P3)

Unspecified
Windows 7
defect

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jchen, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, triage-deferred, Whiteboard: qa-not-actionable)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-0cb28457-5469-484c-bf39-b6db92170119.
=============================================================

This low-volume crash has been showing up in nightlies over the last couple of months. This crash has `js::GCMarker::lazilyMarkChildren` as the second frame, which I think is different from the previously resolved bugs (bug 1260198 and bug 1266579) that have similar top frame signature.

Crash addresses are all over the place so it could be security sensitive as well.

Any ideas, Jon?
Flags: needinfo?
Flags: needinfo?(jcoppeard)
Flags: needinfo?
Group: core-security → javascript-core-security
This is a pretty generic crash so I'll just unhide it. If somebody figures out something more specific, file a new sec bug.
Group: javascript-core-security
Keywords: triage-deferred
Priority: -- → P3
78% of crashes are on amd64.
Blocks: GCCrashes
Flags: needinfo?(jcoppeard)
Keywords: stalled
Whiteboard: qa-not-actionable

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → WORKSFORME

Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit auto_nag documentation.

Keywords: stalled
You need to log in before you can comment on or make changes to this bug.