Status

()

Core
JavaScript: GC
P3
critical
a year ago
7 months ago

People

(Reporter: philipp, Unassigned)

Tracking

({crash, regression, triage-deferred})

49 Branch
crash, regression, triage-deferred
Points:
---

Firefox Tracking Flags

(firefox-esr45 unaffected, firefox51 wontfix, firefox52 fix-optional, firefox53 wontfix, firefox54 ?)

Details

(crash signature)

(Reporter)

Description

a year ago
This bug was filed from the Socorro interface and is 
report bp-deeaa9f4-c915-44cd-9a4f-d20c72170126.
=============================================================
Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	XUL 	TraceStackRoots 	js/src/gc/Marking.cpp:651
1 	XUL 	js::gc::GCRuntime::markRuntime(JSTracer*, js::gc::GCRuntime::TraceOrMarkRuntime, js::AutoLockForExclusiveAccess&) 	js/src/gc/RootMarking.cpp:92
2 	XUL 	js::Nursery::collect(JSRuntime*, JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/gc/Nursery.cpp:567
3 	XUL 	js::gc::GCRuntime::minorGCImpl(JS::gcreason::Reason, mozilla::Vector<js::ObjectGroup*, 0ul, js::SystemAllocPolicy>*) 	js/src/jsgc.cpp:6459
4 	XUL 	js::gc::GCRuntime::gcIfRequested(JSContext*) 	js/src/gc/GCRuntime.h:621
5 	XUL 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:409
6 	XUL 	js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) 	js/src/vm/Interpreter.cpp:517
7 	XUL 	JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) 	js/src/jsapi.cpp:2851
8 	XUL 	xpc::XrayWrapper<js::CrossCompartmentWrapper, xpc::DOMXrayTraits>::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) const 	js/src/jsapi.h:3295
9 	XUL 	js::Proxy::get(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>) 	js/src/proxy/Proxy.cpp:310
10 	XUL 	js::GetProperty(JSContext*, JS::Handle<JS::Value>, JS::Handle<js::PropertyName*>, JS::MutableHandle<JS::Value>) 	js/src/vm/NativeObject.h:1477
11 	XUL 	js::jit::ComputeGetPropResult 	js/src/jit/SharedIC.cpp:2677
12 	XUL 	js::jit::DoGetPropFallback

reports with this signature are regressing since firefox 49. they occur on all platforms - on windows 70% of reports show that the mcafee sitadvisor/webadvisor extension is installed though.
the crash seems to happen in a codepath that was added in bug 1266887.
status-firefox51: affected → wontfix
status-firefox52: affected → fix-optional
Too late for a fix for 53, as we are in the last week of the 53 beta cycle.
status-firefox53: affected → wontfix
Keywords: triage-deferred
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.