Open Bug 1613109 Opened 9 months ago Updated 5 months ago

Crash in [@ OOM | unknown | js::AutoEnterOOMUnsafeRegion::crash | js::TypedArrayObject::objectMoved]


(Core :: JavaScript: GC, defect, P5)

Windows 7




(Reporter: pascalc, Unassigned)


(Blocks 1 open bug)


(Keywords: crash)

Crash Data

This bug is for crash report bp-287cc3ec-371e-458d-b6fa-76bdc0200202.

Top 10 frames of crashing thread:

0 xul.dll js::AutoEnterOOMUnsafeRegion::crash js/src/vm/JSContext.cpp:1556
1 xul.dll static js::TypedArrayObject::objectMoved js/src/vm/TypedArrayObject.cpp:245
2 xul.dll js::TenuringTracer::moveToTenuredSlow js/src/gc/Marking.cpp:3281
3 xul.dll js::TenuringTracer::traverse<JSObject> js/src/gc/Marking.cpp:2957
4 xul.dll js::MapGCThingTyped<`lambda at z:/task_1580550237/build/src/js/src/gc/Marking.cpp:2984:43'> js/public/Value.h:1256
5 xul.dll js::TenuringTracer::traceObject js/src/gc/Marking.cpp:3162
6 xul.dll js::Nursery::doCollection js/src/gc/Nursery.cpp:1141
7 xul.dll js::Nursery::collect js/src/gc/Nursery.cpp:1004
8 xul.dll js::gc::GCRuntime::minorGC js/src/gc/GC.cpp:7399
9 xul.dll js::AllocateObject<js::CanGC> js/src/gc/Allocator.cpp:66

We have a few crashes on nightly with this signature, it is more visible on release 72 with > 100 crashes. Not a big crasher but we don't have a bug on file for this signature.

Component: JavaScript Engine → JavaScript: GC

This is an OOM crash.

Blocks: GCCrashes
Priority: -- → P5
Severity: normal → S4
You need to log in before you can comment on or make changes to this bug.