1550475 - Crash in [@ js::jit::FoldTests]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine: JIT, defect, P3)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-3088397e-c91d-4e2c-8bcf-8de400190509.

Spotted by while looking at release crash stats - seems to be more prevelant in 66.0.5: https://bit.ly/2vNQ6Ic. Not much to go on - two comments in German that don't seem to be helpful. No correlations yet.

Top 10 frames of crashing thread:

0 xul.dll js::jit::FoldTests js/src/jit/IonAnalysis.cpp:1072
1 xul.dll js::jit::OptimizeMIR js/src/jit/Ion.cpp:1223
2 xul.dll js::wasm::IonCompileFunctions js/src/wasm/WasmIonCompile.cpp:4076
3 xul.dll static bool ExecuteCompileTask js/src/wasm/WasmGenerator.cpp:713
4 xul.dll js::wasm::ExecuteCompileTaskFromHelperThread js/src/wasm/WasmGenerator.cpp:737
5 xul.dll js::HelperThread::handleWasmWorkload js/src/vm/HelperThreads.cpp:1956
6 xul.dll js::HelperThread::threadLoop js/src/vm/HelperThreads.cpp:2434
7 xul.dll static unsigned int js::detail::ThreadTrampoline<void  js/src/threading/Thread.h:232
8 ucrtbase.dll thread_start<unsigned int > 
9 kernel32.dll BaseThreadInitThunk 

Comment 1

[Nicolas B. Pierron [:nbp]]

This looks like a duplicate of Bug 1263794.

Comment 2

[Pascal Chevrel:pascalc]

No volume on 67. There is a little spike in the just released 66.0.5 so I am leaving it as affected the time to monitor the evolution, but this is wontfix 67.

Comment 3

[Patricia Lawless]

Bulk change of P3 carryover bugs to wontfix for 68.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.