1618647 - Fission crash in [@ IPCError-browser | PContent::Msg_PSHistoryConstructor Value error: message was deserialized, but contained an illegal v]

Status: RESOLVED DUPLICATE of bug 1617521

(Core :: DOM: Content Processes, defect)

Description

[Chris Peterson [:cpeterson]]

This bug is for crash report bp-01265d4b-dd1e-4f85-9761-b85f30200227.

This crash signature first appeared in 75.0a1 build id 20200221095110. All 91 of 91 crash reports have Fission enabled.

Top 10 frames of crashing thread:

0 xul.dll js::frontend::NewFunctionScopeData js/src/frontend/Parser.cpp:1198
1 xul.dll js::frontend::PerHandlerParser<js::frontend::FullParseHandler>::finishFunction js/src/frontend/Parser.cpp:1682
2 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::functionFormalParametersAndBody js/src/frontend/Parser.cpp:3293
3 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::innerFunctionForFunctionBox js/src/frontend/Parser.cpp:2971
4 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::functionDefinition js/src/frontend/Parser.cpp:2778
5 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::methodDefinition js/src/frontend/Parser.cpp:10727
6 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::classMember js/src/frontend/Parser.cpp:7133
7 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::classDefinition js/src/frontend/Parser.cpp:7325
8 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::statementListItem js/src/frontend/Parser.cpp:8233
9 xul.dll js::frontend::GeneralParser<js::frontend::FullParseHandler, mozilla::Utf8Unit>::statementList js/src/frontend/Parser.cpp:3659

Comment 1

[Chris Peterson [:cpeterson]]

Here is the pushlog for the 12 hours preceding build id 20200221095110:

https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=e2e130df4e969b6dea71288ee6c617c9bf0e2a98&tochange=acc0c8327c266ac0b0c61eecdba6d625957ecf81

And the 12 hours before that:

https://hg.mozilla.org/integration/autoland/pushloghtml?fromchange=b532be9d27193e1572d29f3cf2f9e7b011862081&tochange=e2e130df4e969b6dea71288ee6c617c9bf0e2a98

I got the changeset id for this build id from:
http://archive.mozilla.org/pub/firefox/nightly/2020/02/2020-02-21-09-51-10-mozilla-central/firefox-75.0a1.en-US.win64.txt