1908810 - Crash in [@ SweepScriptDataTable]

Status: NEW

(Core :: JavaScript: GC, defect, P5)

Description

[BugBot [:suhaib / :marco]]

Crash report: https://crash-stats.mozilla.org/report/index/bdebf164-1a95-473f-850f-9330e0240701

Reason: EXCEPTION_ACCESS_VIOLATION_READ

Top 10 frames of crashing thread:

0  xul.dll  SweepScriptDataTable  js/src/vm/JSScript.cpp:2243
1  xul.dll  js::SweepScriptData  js/src/vm/JSScript.cpp:2255
1  xul.dll  js::gc::GCRuntime::endSweepPhase  js/src/gc/Sweeping.cpp:2441
1  xul.dll  js::gc::GCRuntime::incrementalSlice  js/src/gc/GC.cpp:3895
2  xul.dll  js::gc::GCRuntime::gcCycle  js/src/gc/GC.cpp:4393
3  xul.dll  js::gc::GCRuntime::collect  js/src/gc/GC.cpp:4583
4  xul.dll  js::gc::GCRuntime::gc  js/src/gc/GC.cpp:4661
4  xul.dll  JS::NonIncrementalGC  js/src/gc/GCAPI.cpp:298
4  xul.dll  mozilla::dom::WorkerPrivate::GarbageCollectInternal  dom/workers/WorkerPrivate.cpp:5822
5  xul.dll  mozilla::dom::  dom/workers/WorkerPrivate.cpp:677

By querying Nightly crashes reported within the last 2 months, here are some insights about the signature:

• First crash report: 2024-05-12
• Process type: Content
• Is startup crash: No
• Has user comments: No
• Is null crash: Yes - 7 out of 14 crashes happened on null or near null memory address

Comment 1

[BugBot [:suhaib / :marco]]

The Bugbug bot thinks this bug should belong to the 'Core::JavaScript: GC' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.