1694896 - Crash in [@ js::NativeObject::addEnumerableDataProperty]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect, P5)

Description

[Simon Giesecke [:sg] [he/him]]

Crash report: https://crash-stats.mozilla.org/report/index/79c6c110-2eb8-41e5-945b-d3f0a0210123

Reason: EXCEPTION_ILLEGAL_INSTRUCTION

Top 5 frames of crashing thread:

0 xul.dll static js::NativeObject::addEnumerableDataProperty js/src/vm/Shape.cpp:822
1 xul.dll js::NativeSetProperty<js::Qualified> js/src/vm/NativeObject.cpp:2700
2 xul.dll js::SetObjectElementWithReceiver js/src/vm/Interpreter.cpp:4808
3  @0x2158e7d6433 
4 xul.dll trunc 

Comment 1

[Gabriele Svelto [:gsvelto]]

Crash addresses and reasons are all over the place, this looks like people with bad hardware unless you found a stack and reason combination that happens more often than others.

Comment 2

[Simon Giesecke [:sg] [he/him]]

Hm. null and near-null addresses are more frequent than random addresses, in particular 0xffffffffffffffff and 0x0.

However, the stacks are all truncated.

Comment 3

[Nicolas B. Pierron [:nbp]]

I do not see anything either.
I see too many crashes with random addresses, and random lines within the same functions … I was not able to isolate a pattern.

Based on the low volume, I will sort it as P5.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.