1613109 - Crash in [@ OOM | unknown | js::AutoEnterOOMUnsafeRegion::crash | js::TypedArrayObject::objectMoved]

Status: RESOLVED DUPLICATE of bug 1472062

(Core :: JavaScript: GC, defect, P5)

Description

[Pascal Chevrel:pascalc]

This bug is for crash report bp-287cc3ec-371e-458d-b6fa-76bdc0200202.

Top 10 frames of crashing thread:

0 xul.dll js::AutoEnterOOMUnsafeRegion::crash js/src/vm/JSContext.cpp:1556
1 xul.dll static js::TypedArrayObject::objectMoved js/src/vm/TypedArrayObject.cpp:245
2 xul.dll js::TenuringTracer::moveToTenuredSlow js/src/gc/Marking.cpp:3281
3 xul.dll js::TenuringTracer::traverse<JSObject> js/src/gc/Marking.cpp:2957
4 xul.dll js::MapGCThingTyped<`lambda at z:/task_1580550237/build/src/js/src/gc/Marking.cpp:2984:43'> js/public/Value.h:1256
5 xul.dll js::TenuringTracer::traceObject js/src/gc/Marking.cpp:3162
6 xul.dll js::Nursery::doCollection js/src/gc/Nursery.cpp:1141
7 xul.dll js::Nursery::collect js/src/gc/Nursery.cpp:1004
8 xul.dll js::gc::GCRuntime::minorGC js/src/gc/GC.cpp:7399
9 xul.dll js::AllocateObject<js::CanGC> js/src/gc/Allocator.cpp:66

We have a few crashes on nightly with this signature, it is more visible on release 72 with > 100 crashes. Not a big crasher but we don't have a bug on file for this signature.

Comment 1

[Jon Coppeard (:jonco)]

This is an OOM crash.