Closed Bug 1463639 Opened 6 years ago Closed 6 years ago

Crash in js::jit::PostWriteBarrier

Categories

(Core :: JavaScript: GC, defect)

Product:
Core
Component:
JavaScript: GC
Version:
62 Branch
Platform:
x86
Windows 10
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1463501
Tracking Flags:
Tracking Status
firefox62 --- affected

People

(Reporter: ananuti, Unassigned)

References

Details

(Keywords: crash)

Crash Data

This bug was filed from the Socorro interface and is
report bp-c811e0e8-9142-4a29-9434-2ad560180523.
=============================================================

Top 2 frames of crashing thread:

0 xul.dll js::jit::PostWriteBarrier js/src/jit/VMFunctions.cpp:696
1 ucrtbase.dll remainderf 

=============================================================

STR - Enable nursery strings and open gmail.
This is probably a duplicate but ni? Steve just in case.
Flags: needinfo?(sphink)
Last good mozilla-inbound changeset a2dfc3fd6c0c
First bad mozilla-inbound changeset 3d5b6c62a386

3d5b6c62a386 make string post write barrier conditional on nursery strings
c67debf6be18 Use whole cell buffer to post-barrier string -> string edges in JIT, r=jandem
This was a dumb mistake on my part.
Status: NEW → RESOLVED
Closed: 6 years ago
Flags: needinfo?(sphink)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.