1377613 - Crash in EmitSimpleCharacter

Status: RESOLVED WONTFIX

(Core :: JavaScript Engine, defect, P3)

Description

[baffclan]

This bug was filed from the Socorro interface and is 
report bp-68ef103c-ca3f-49bb-a47d-06b540170701,
       bp-40978070-5180-44b5-beb3-467880170701.
=============================================================

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	EmitSimpleCharacter 	js/src/irregexp/RegExpEngine.cpp:3707
1 	xul.dll 	js::irregexp::TextNode::TextEmitPass(js::irregexp::RegExpCompiler*, js::irregexp::TextNode::TextEmitPassType, bool, js::irregexp::Trace*, bool, int*) 	js/src/irregexp/RegExpEngine.cpp:3907
2 	xul.dll 	js::irregexp::TextNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:3998
3 	xul.dll 	js::irregexp::TextNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4011
4 	xul.dll 	js::irregexp::ChoiceNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4451
5 	xul.dll 	js::irregexp::ActionNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4565
6 	xul.dll 	js::irregexp::ChoiceNode::EmitOutOfLineContinuation(js::irregexp::RegExpCompiler*, js::irregexp::Trace*, js::irregexp::GuardedAlternative, js::irregexp::AlternativeGeneration*, int, bool) 	js/src/irregexp/RegExpEngine.cpp:4527
7 	xul.dll 	js::irregexp::ChoiceNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4477
8 	xul.dll 	js::irregexp::LoopChoiceNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4034
9 	xul.dll 	js::irregexp::Trace::Flush(js::irregexp::RegExpCompiler*, js::irregexp::RegExpNode*) 	js/src/irregexp/RegExpEngine.cpp:2777
10 	xul.dll 	js::irregexp::LoopChoiceNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4031
11 	xul.dll 	js::irregexp::TextNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4011
12 	xul.dll 	js::irregexp::ChoiceNode::Emit(js::irregexp::RegExpCompiler*, js::irregexp::Trace*) 	js/src/irregexp/RegExpEngine.cpp:4451
13 	xul.dll 	js::irregexp::RegExpCompiler::Assemble(JSContext*, js::irregexp::RegExpMacroAssembler*, js::irregexp::RegExpNode*, int) 	js/src/irregexp/RegExpEngine.cpp:1686
14 	xul.dll 	js::irregexp::CompilePattern(JSContext*, JS::Handle<js::RegExpShared*>, js::irregexp::RegExpCompileData*, JS::Handle<JSLinearString*>, bool, bool, bool, bool, bool, bool, bool) 	js/src/irregexp/RegExpEngine.cpp:1854
15 	xul.dll 	js::RegExpShared::compile(JSContext*, JS::MutableHandle<js::RegExpShared*>, JS::Handle<JSAtom*>, JS::Handle<JSLinearString*>, js::RegExpShared::CompilationMode, js::RegExpShared::ForceByteCodeEnum) 	js/src/vm/RegExpObject.cpp:1015
16 	xul.dll 	js::RegExpShared::compile(JSContext*, JS::MutableHandle<js::RegExpShared*>, JS::Handle<JSLinearString*>, js::RegExpShared::CompilationMode, js::RegExpShared::ForceByteCodeEnum) 	js/src/vm/RegExpObject.cpp:989
17 	xul.dll 	js::RegExpShared::execute(JSContext*, JS::MutableHandle<js::RegExpShared*>, JS::Handle<JSLinearString*>, unsigned __int64, js::MatchPairs*, unsigned __int64*) 	js/src/vm/RegExpObject.cpp:1059
18 	xul.dll 	ExecuteRegExp 	js/src/builtin/RegExp.cpp:953
19 	xul.dll 	RegExpMatcherImpl 	js/src/builtin/RegExp.cpp:974
20 	xul.dll 	js::RegExpMatcherRaw(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSString*>, int, js::MatchPairs*, JS::MutableHandle<JS::Value>) 	js/src/builtin/RegExp.cpp:1028
21 		@0x2369addcf2d 	
22 	xul.dll 	js::irregexp::RegExpParser<unsigned char>::ParseClassAtom(char16_t*, unsigned int*) 	js/src/irregexp/RegExpParser.cpp:1195
23 		@0x9396df7d5f 	
24 	xul.dll 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:492
25 		@0x2434017cfff 	
26 	xul.dll 	xul.dll@0x3ad65b 	
27 	mozglue.dll 	je_malloc 	memory/mozjemalloc/mozjemalloc.cpp:4816
28 		@0xfffe024348c750ff 	
29 	xul.dll 	js::jit::EnterBaselineMethod(JSContext*, js::RunState&) 	js/src/jit/BaselineJIT.cpp:200
30 	xul.dll 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp:400
31 	xul.dll 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:488
32 	xul.dll 	Interpret 	js/src/vm/Interpreter.cpp:3065
33 	xul.dll 	js::RunScript(JSContext*, js::RunState&) 	js/src/vm/Interpreter.cpp:410
34 	xul.dll 	js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) 	js/src/vm/Interpreter.cpp:488
35 	xul.dll 	js::jit::DoCallFallback 	js/src/jit/BaselineIC.cpp:2552
36 		@0x2369add6e8d 	



Application Basics: 
Name: Firefox
Version: 56.0a1
Build ID: 20170630030203
Update Channel: nightly
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0
OS: Windows_NT 10.0

Comment 1

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.