1902348 - Crash in [@ JS::DispatchTraceKindTyped] — MOZ_CRASH(Invalid trace kind in DispatchTraceKindTyped.)

Status: NEW

(Core :: JavaScript: GC, defect, P5)

Description

[Liz Henry (:lizzard) (relman/hg->git project)]

Top crash in Nightly 129, all in Windows NT.

Crash report: https://crash-stats.mozilla.org/report/index/52f847f1-005d-4756-b7ec-1a9e80240612

MOZ_CRASH Reason: MOZ_CRASH(Invalid trace kind in DispatchTraceKindTyped.)

Top 10 frames:

0  xul.dll  JS::DispatchTraceKindTyped(js::gc::TraceKindCanBeGrayFunctor, JS::TraceKind)  js/public/TraceKind.h:240
0  xul.dll  js::gc::TraceKindCanBeMarkedGray(JS::TraceKind)  js/src/gc/TraceKind.h:53
0  xul.dll  js::gc::UnmarkGrayTracer::onChild(JS::GCCellPtr, char const*)  js/src/gc/Marking.cpp:2737
0  xul.dll  JS::CallbackTracer::onEdge(JSString**, char const*)  js/public/TracingAPI.h:245
0  xul.dll  js::GenericTracerImpl<JS::CallbackTracer>::onStringEdge(JSString**, char const*)  js/public/TracingAPI.h:219
0  xul.dll  js::gc::TraceEdgeInternal(JSTracer*, JSString**, char const*)  js/src/gc/Tracer.h:109
0  xul.dll  TraceTaggedPtrEdge<JS::Value>::<lambda_1>::operator()(JSString*) const  js/src/gc/Marking.cpp:682
0  xul.dll  js::MapGCThingTyped(JS::Value const&, TraceTaggedPtrEdge<JS::Value>::<lambda_...  js/public/Value.h:1482
0  xul.dll  TraceTaggedPtrEdge(JSTracer*, JS::Value*, char const*)  js/src/gc/Marking.cpp:681
0  xul.dll  js::gc::TraceEdgeInternal(JSTracer*, JS::Value*, char const*)  js/src/gc/Marking.cpp:701

Comment 1

[Nicolas B. Pierron [:nbp — off until 29-09]]

Very low volume … only spiked due to repeated reports.