1334446 - Crash in TraceStackRoots

Status: NEW

Description

[[:philipp]]

This bug was filed from the Socorro interface and is 
report bp-deeaa9f4-c915-44cd-9a4f-d20c72170126.
=============================================================
Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	XUL 	TraceStackRoots 	js/src/gc/Marking.cpp:651
1 	XUL 	js::gc::GCRuntime::markRuntime(JSTracer*, js::gc::GCRuntime::TraceOrMarkRuntime, js::AutoLockForExclusiveAccess&) 	js/src/gc/RootMarking.cpp:92
2 	XUL 	js::Nursery::collect(JSRuntime*, JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/gc/Nursery.cpp:567
3 	XUL 	js::gc::GCRuntime::minorGCImpl(JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/jsgc.cpp:6459
4 	XUL 	js::gc::GCRuntime::gcIfRequested(JSContext*) 	js/src/gc/GCRuntime.h:621
5 	XUL 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:409
6 	XUL 	js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp:517
7 	XUL 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp:2851
8 	XUL 	xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::DOMXrayTraits>::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const 	js/src/jsapi.h:3295
9 	XUL 	js::Proxy::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/proxy/Proxy.cpp:310
10 	XUL 	js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) 	js/src/vm/NativeObject.h:1477
11 	XUL 	js::jit::ComputeGetPropResult 	js/src/jit/SharedIC.cpp:2677
12 	XUL 	js::jit::DoGetPropFallback

reports with this signature are regressing since firefox 49. they occur on all platforms - on windows 70% of reports show that the mcafee sitadvisor/webadvisor extension is installed though.
the crash seems to happen in a codepath that was added in bug 1266887.

Comment 1

[Liz Henry (:lizzard) (needinfo? me)]

Too late for a fix for 53, as we are in the last week of the 53 beta cycle.