Closed Bug 1334446 Opened 7 years ago Closed 1 year ago

Crash in TraceStackRoots

Categories

(Core :: JavaScript: GC, defect, P3)

49 Branch
defect

Tracking

()

RESOLVED WORKSFORME
Tracking Status
firefox-esr45 --- unaffected
firefox51 --- wontfix
firefox52 --- fix-optional
firefox53 --- wontfix
firefox54 --- ?

People

(Reporter: philipp, Unassigned)

References

Details

(Keywords: crash, regression, triage-deferred, Whiteboard: qa-not-actionable)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-deeaa9f4-c915-44cd-9a4f-d20c72170126.
=============================================================
Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	XUL 	TraceStackRoots 	js/src/gc/Marking.cpp:651
1 	XUL 	js::gc::GCRuntime::markRuntime(JSTracer*, js::gc::GCRuntime::TraceOrMarkRuntime, js::AutoLockForExclusiveAccess&) 	js/src/gc/RootMarking.cpp:92
2 	XUL 	js::Nursery::collect(JSRuntime*, JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/gc/Nursery.cpp:567
3 	XUL 	js::gc::GCRuntime::minorGCImpl(JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/jsgc.cpp:6459
4 	XUL 	js::gc::GCRuntime::gcIfRequested(JSContext*) 	js/src/gc/GCRuntime.h:621
5 	XUL 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:409
6 	XUL 	js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp:517
7 	XUL 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp:2851
8 	XUL 	xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::DOMXrayTraits>::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const 	js/src/jsapi.h:3295
9 	XUL 	js::Proxy::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/proxy/Proxy.cpp:310
10 	XUL 	js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) 	js/src/vm/NativeObject.h:1477
11 	XUL 	js::jit::ComputeGetPropResult 	js/src/jit/SharedIC.cpp:2677
12 	XUL 	js::jit::DoGetPropFallback

reports with this signature are regressing since firefox 49. they occur on all platforms - on windows 70% of reports show that the mcafee sitadvisor/webadvisor extension is installed though.
the crash seems to happen in a codepath that was added in bug 1266887.
Too late for a fix for 53, as we are in the last week of the 53 beta cycle.
Keywords: triage-deferred
Priority: -- → P3
Whiteboard: qa-not-actionable

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Severity: critical → S3

Closing because no crashes reported for 12 weeks.

Status: NEW → RESOLVED
Closed: 1 year ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.