1432632 - Crash in js::detail::HashTable<T>::changeTableSize | js::detail::HashTable<T>::add<T> | js::detail::HashTable<T>::relookupOrAdd<T> | js::DependentAddPtr<T>::add<T>

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect, P5)

Description

[Liz Henry (:lizzard) (relman/hg->git project)]

This bug was filed from the Socorro interface and is
report bp-d8d7b20d-ceff-4f5c-9555-8e2640180123.
=============================================================


Windows crash that started with the 20180121220252 build. 

Top 10 frames of crashing thread:

0 xul.dll js::detail::HashTable<js::ReadBarriered<js::SavedFrame*> const, js::HashSet<js::ReadBarriered<js::SavedFrame*>, js::SavedFrame::HashPolicy, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::changeTableSize js/public/HashTable.h:1514
1 xul.dll js::detail::HashTable<js::ReadBarriered<js::SavedFrame*> const, js::HashSet<js::ReadBarriered<js::SavedFrame*>, js::SavedFrame::HashPolicy, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::add<JS::Rooted<js::SavedFrame*> const&> js/public/HashTable.h:1814
2 xul.dll js::detail::HashTable<js::ReadBarriered<js::SavedFrame*> const, js::HashSet<js::ReadBarriered<js::SavedFrame*>, js::SavedFrame::HashPolicy, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::relookupOrAdd<JS::Rooted<js::SavedFrame*> const&> js/public/HashTable.h:1879
3 xul.dll js::DependentAddPtr<JS::GCHashSet<js::ReadBarriered<js::SavedFrame*>, js::SavedFrame::HashPolicy, js::SystemAllocPolicy> >::add<js::SavedFrame::Lookup, JS::Rooted<js::SavedFrame*> > js/src/jshashutil.h:41
4 xul.dll js::SavedStacks::getOrCreateSavedFrame js/src/vm/SavedStacks.cpp:1510
5 xul.dll js::SavedStacks::insertFrames js/src/vm/SavedStacks.cpp:1412
6 xul.dll js::SavedStacks::saveCurrentStack js/src/vm/SavedStacks.cpp:1175
7 xul.dll JS::CaptureCurrentStack js/src/jsapi.cpp:7696
8 xul.dll mozilla::dom::CallbackObject::FinishSlowJSInitIfMoreThanOneOwner dom/bindings/CallbackObject.cpp:104
9 xul.dll mozilla::dom::RootedCallback<RefPtr<mozilla::dom::binding_detail::FastEventListener> >::~RootedCallback<RefPtr<mozilla::dom::binding_detail::FastEventListener> > dom/bindings/CallbackObject.h:619

=============================================================

Comment 1

[Marcia Knous [:marcia]]

Looks as if this is a single install crash - 8 crashes but only one install on nightly so far.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.