1887914 - Crash in [@ SweepDependentStrings]

Status: RESOLVED FIXED

(Core :: JavaScript: GC, defect, P2)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

8 crashes from 3 installs of Firefox 126.0a1's latest build on Windows 10.

Crash report: https://crash-stats.mozilla.org/report/index/507ee3d8-a4dd-4a36-9901-22fe80240324

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  CrashReporter::PairedDumpCallback  toolkit/crashreporter/nsExceptionHandler.cpp:3919
1  xul.dll  google_breakpad::ExceptionHandler::WriteMinidumpForChild  toolkit/crashreporter/breakpad-client/windows/handler/exception_handler.cc:889
2  xul.dll  CrashReporter::CreateMinidumpsAndPair  toolkit/crashreporter/nsExceptionHandler.cpp:3993
3  xul.dll  mozilla::ipc::CrashReporterHost::GenerateMinidumpAndPair<mozilla::dom::ContentParent>  ipc/glue/CrashReporterHost.h:78
4  xul.dll  mozilla::dom::ContentParent::GeneratePairedMinidump  dom/ipc/ContentParent.cpp:4514
5  xul.dll  mozilla::dom::ContentParent::KillHard  dom/ipc/ContentParent.cpp:4562
6  xul.dll  nsTimerImpl::Fire::<lambda_14>::operator const  xpcom/threads/nsTimerImpl.cpp:681
6  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 3, nsTimerImpl::FuncCallback, nsTimerImpl::ClosureCallback>::matchN  mfbt/Variant.h:309
6  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 2, nsCOMPtr<nsIObserver>, nsTimerImpl::FuncCallback, nsTimerImpl::ClosureCallback>::matchN  mfbt/Variant.h:318
6  xul.dll  mozilla::detail::VariantImplementation<unsigned char, 1, nsCOMPtr<nsITimerCallback>, nsCOMPtr<nsIObserver>, nsTimerImpl::FuncCallback, nsTimerImpl::ClosureCallback>::matchN  mfbt/Variant.h:318

Comment 1

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Fixed by backout of bug 1879918.

Comment 2

[BugBot [:suhaib / :marco]]

:sfink, since you are the author of the regressor, bug 1879918, could you take a look?

For more information, please visit BugBot documentation.