1895413 - Crash in [@ JSCLASS_RESERVED_SLOTS]

Status: NEW

(Core :: JavaScript Engine, defect, P3)

Description

[BugBot [:suhaib / :marco/ :calixte]]

Crash report: https://crash-stats.mozilla.org/report/index/2245d7ef-72c0-4a65-a08c-334740240504

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  JSCLASS_RESERVED_SLOTS  js/public/Class.h:773
0  xul.dll  GetProxyGCObjectKind  js/src/vm/ProxyObject.cpp:27
0  xul.dll  js::ProxyObject::New  js/src/vm/ProxyObject.cpp:89
1  xul.dll  js::NewProxyObject  js/src/proxy/Proxy.cpp:1024
2  xul.dll  js::Wrapper::New  js/src/proxy/Wrapper.cpp:281
3  xul.dll  xpc::WrapperFactory::Rewrap  js/xpconnect/wrappers/WrapperFactory.cpp:586
4  xul.dll  JS::Compartment::getOrCreateWrapper  js/src/vm/Compartment.cpp:308
5  xul.dll  JS::Compartment::wrap  js/src/vm/Compartment.cpp:380
6  xul.dll  JS::Compartment::wrap  js/src/vm/Compartment-inl.h:114
7  xul.dll  mozilla::dom::binding_detail::DoGetOrCreateDOMReflector  dom/bindings/BindingUtils.h:1218

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-03-21
• Process type: Content
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - 2 out of 4 crashes happened on null or near null memory address