1572719 - Crash in [@ OOM | unknown | js::AutoEnterOOMUnsafeRegion::crash | js::gc::StoreBuffer::GenericBuffer::put<T>]

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P3)

Description

[Pascal Chevrel (relman team) -> :pascalc]

This bug is for crash report bp-2c3df5ca-0aa8-4bca-9d34-6f0340190806.

Top 10 frames of crashing thread:

0 xul.dll js::AutoEnterOOMUnsafeRegion::crash js/src/vm/JSContext.cpp:1480
1 xul.dll js::gc::StoreBuffer::GenericBuffer::put<js::NurseryShapesRef> js/src/gc/StoreBuffer.h
2 xul.dll static void js::GetterSetterWriteBarrierPost js/src/vm/Shape-inl.h:165
3 xul.dll js::Shape::new_ js/src/vm/Shape-inl.h:120
4 xul.dll js::NativeObject::addAccessorPropertyInternal js/src/vm/Shape.cpp:676
5 xul.dll js::NativeDefineProperty js/src/vm/NativeObject.cpp:1769
6 xul.dll js::DefineProperty js/src/vm/JSObject.cpp:2892
7 xul.dll static bool intrinsic_DefineProperty js/src/vm/SelfHosting.cpp:692
8 xul.dll js::InternalCallOrConstruct js/src/vm/Interpreter.cpp:540
9 xul.dll static bool InternalCall js/src/vm/Interpreter.cpp:595

The volume on 69 beta seems high compared to 68 release.

Comment 1

[Andrew Sutherland [:asuth] (he/him)]

(the triage robot wants me to triage this and although this may be a diffuse OOM that's hard to act on, the leaf nodes are in JS code so perhaps the JS team can find something useful.)

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.