1564901 - Crash in [@ JSScript::createJitScript]

Status: RESOLVED DUPLICATE of bug 1564349

(Core :: JavaScript Engine: JIT, defect)

Description

[Marcia Knous [:marcia]]

This bug is for crash report bp-7854f089-eee7-4180-9ba0-c17da0190710.

Seen while looking at nightly crash stats: https://bit.ly/2YK1EsF. All Mac crashes are in 20190709153742.

Comments: Setting javascript.options.blinterp to true in about:config

Top 10 frames of crashing thread:

0 XUL JSScript::createJitScript js/src/jit/JitScript.cpp:137
1 XUL js::jit::MethodStatus js::jit::CanEnterBaselineAtBranch< js/src/jit/BaselineJIT.cpp:377
2 XUL Interpret js/src/vm/Interpreter.cpp:1983
3 XUL js::RunScript js/src/vm/Interpreter.cpp:425
4 XUL js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:568
5 XUL JS::Call js/src/jsapi.cpp:2658
6 XUL mozilla::dom::EventListener::HandleEvent dom/bindings/EventListenerBinding.cpp:52
7 XUL mozilla::EventListenerManager::HandleEventSubType dist/include/mozilla/dom/EventListenerBinding.h:66
8 XUL mozilla::EventListenerManager::HandleEventInternal dom/events/EventListenerManager.cpp:1222
9 XUL mozilla::EventTargetChainItem::HandleEvent dom/events/EventDispatcher.cpp:349

Comment 1

[Marcia Knous [:marcia]]

Perhaps based on another dupe I saw this will be addressed in Bug 1564349?

Comment 2

[Jan de Mooij [:jandem]]

Fixed by bug 1564349.

Comment 3

[Jan de Mooij [:jandem]]

(In reply to Marcia Knous [:marcia - needinfo? me] from comment #1)

Perhaps based on another dupe I saw this will be addressed in Bug 1564349?

Yes :) Closed it as duplicate. Thanks for filing this!