Closed Bug 1386215 Opened 7 years ago Closed 5 years ago

Crash in js::AtomizeString

Categories

(Core :: JavaScript Engine, defect, P3)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Windows 10
Type:
defect

Tracking

()

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox-esr60 --- wontfix
firefox55 --- wontfix
firefox56 --- wontfix
firefox57 --- unaffected
firefox64 --- wontfix
firefox65 --- wontfix
firefox66 --- wontfix

People

(Reporter: baffclan, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-ec18c8b1-64d0-4043-99ff-8a0370170801.
=============================================================

Crashing Thread (0)
Frame 	Module 	Signature 	Source
0 	xul.dll 	js::AtomizeString(JSContext*, JSString*, js::PinningBehavior) 	js/src/jsatom.cpp:479
1 	xul.dll 	js::ToAtom<1>(JSContext*, JS::Handle<JS::Value>) 	js/src/jsatom.cpp:604
2 	xul.dll 	js::ToPropertyKey(JSContext*, JS::Handle<JS::Value>, JS::MutableHandle<jsid>) 	js/src/jsobjinlines.h:596
3 	xul.dll 	js::SetObjectElement(JSContext*, JS::Handle<JSObject*>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::Handle<JS::Value>, bool, JS::Handle<JSScript*>, unsigned char*) 	js/src/vm/Interpreter.cpp:4642
4 	xul.dll 	js::jit::DoSetElemFallback 	js/src/jit/BaselineIC.cpp:1091
5 		@0x134a3c7d17b
status-firefox55: --- → affected
status-firefox56: --- → ?
status-firefox57: --- → unaffected
Priority: -- → P3
50% of crashes for this signature are occurring on ARM platforms which is unusual.
Blocks: GCCrashes
Closing because no crashes reported for 12 weeks.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → WONTFIX
Closing because no crashes reported for 12 weeks.
You need to log in before you can comment on or make changes to this bug.