1535312 - Crash in [@ js::jit::BacktrackingAllocator::tryAllocateRegister]

Status: RESOLVED DUPLICATE of bug 1263794

(Core :: JavaScript Engine: JIT, defect, P1)

Description

[Pascal Chevrel:pascalc]

This bug is for crash report bp-9f7732b5-4987-41f7-8a5d-542040190314.

Top 10 frames of crashing thread:

0 xul.dll js::jit::BacktrackingAllocator::tryAllocateRegister js/src/jit/BacktrackingAllocator.cpp:1530
1 xul.dll js::jit::BacktrackingAllocator::tryAllocatingRegistersForSpillBundles js/src/jit/BacktrackingAllocator.cpp:1717
2 xul.dll js::jit::BacktrackingAllocator::go js/src/jit/BacktrackingAllocator.cpp:897
3 xul.dll js::jit::GenerateLIR js/src/jit/Ion.cpp:1702
4 xul.dll js::jit::CompileBackEnd js/src/jit/Ion.cpp:1773
5 xul.dll js::HelperThread::handleIonWorkload js/src/vm/HelperThreads.cpp:2049
6 xul.dll js::HelperThread::threadLoop js/src/vm/HelperThreads.cpp:2471
7 xul.dll static unsigned int js::detail::ThreadTrampoline<void  js/src/threading/Thread.h:232
8 ucrtbase.dll thread_start<unsigned int > 
9 kernel32.dll BaseThreadInitThunk 

Comment 1

[Jason Orendorff [:jorendorff]]

Brian, can you take a look at this? Maybe the same as bug 1535306. Consistent stacks. Always happens on a background thread.

Comment 2

[Nicolas B. Pierron [:nbp]]

This is likely relate to Bug 1263794.

Comment 3

[Brian Hackett [Laid off!]]

I don't have access to bug 1263794. It looks like this signature has been crashing at a consistent volume for a while though.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit auto_nag documentation.