1586199 - Crash in [@ <name omitted> | nsJSUtils::ExecutionContext::Decode]

Status: RESOLVED DUPLICATE of bug 1586433

(Core :: JavaScript Engine, defect)

Description

[Calixte Denizet (:calixte)]

This bug is for crash report bp-0743d048-4595-47a2-b1ce-0029e0191003.

Top 10 frames of crashing thread:

0 XUL <name omitted> js/src/vm/Xdr.h:431
1 XUL nsJSUtils::ExecutionContext::Decode dom/base/nsJSUtils.cpp:294
2 XUL mozilla::dom::ScriptLoader::EvaluateScript dom/script/ScriptLoader.cpp:2783
3 XUL mozilla::dom::ScriptLoader::ProcessRequest dom/script/ScriptLoader.cpp:2315
4 XUL mozilla::dom::ScriptLoader::ProcessScriptElement dom/script/ScriptLoader.cpp:1584
5 XUL mozilla::dom::ScriptElement::MaybeProcessScript dom/script/ScriptElement.cpp:118
6 XUL nsHtml5TreeOpExecutor::RunScript parser/html/nsHtml5TreeOpExecutor.cpp:729
7 XUL nsHtml5TreeOpExecutor::RunFlushLoop parser/html/nsHtml5TreeOpExecutor.cpp:532
8 XUL nsHtml5ExecutorReflusher::Run parser/html/nsHtml5TreeOpExecutor.cpp:70
9 XUL mozilla::SchedulerGroup::Runnable::Run xpcom/threads/SchedulerGroup.cpp:295

There are 4 crashes (from 4 installations) in nightly 71 starting with buildid 20191003093956. In analyzing the backtrace, the regression may have been introduced by patch [1] to fix bug 1584820.

[1] https://hg.mozilla.org/mozilla-central/rev?node=ea8bfbc68dfd

Comment 1

[Iain Ireland [:iain]]

This is a duplicate of bug 1586433.