1435678 - Crash in js::jit::MDefinition::congruentIfOperandsEqual

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect, P3)

Description

[baffclan]

This bug was filed from the Socorro interface and is
report bp-a0be44fe-9aae-4fb3-828d-880f30180205.
=============================================================

Top 10 frames of crashing thread:

0 xul.dll js::jit::MDefinition::congruentIfOperandsEqual js/src/jit/MIR.cpp:300
1  @0x37019ff13f 
2 xul.dll js::jit::ValueNumberer::visitControlInstruction js/src/jit/ValueNumbering.cpp:874
3 xul.dll js::jit::ValueNumberer::visitBlock js/src/jit/ValueNumbering.cpp:997
4 xul.dll js::jit::ValueNumberer::visitDominatorTree js/src/jit/ValueNumbering.cpp:1045
5 xul.dll js::jit::ValueNumberer::run js/src/jit/ValueNumbering.cpp:1254
6 xul.dll js::jit::OptimizeMIR js/src/jit/Ion.cpp:1634
7 xul.dll js::jit::CompileBackEnd js/src/jit/Ion.cpp:1981
8 xul.dll js::HelperThread::handleIonWorkload js/src/vm/HelperThreads.cpp:1838
9 xul.dll js::HelperThread::threadLoop js/src/vm/HelperThreads.cpp:2227

=============================================================

Comment 1

[Nicolas B. Pierron [:nbp] {away}]

A small number of reports 9 reports from x86, and coincidentally 9 reports from esr52 over the 11 reports since the 1st of January 2018.

Comment 2

[BugBot [:suhaib / :marco]]

Closing because no crashes reported for 12 weeks.