1982158 - Assertion failure: !cx->isExceptionPending(), at vm/Interpreter.cpp:504

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect, P2)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: debug stack

oomTest(function() { setTimeout(function(){}, 1); });

(gdb) bt
#0  0x00005555572ee1a2 in MOZ_CrashSequence (aAddress=0x0, aLine=504) at /home/msf3/shell-cache/js-dbg-64-linux-x86_64-50c83688a650-581710/objdir-js/dist/include/mozilla/Assertions.h:248
#1  CallJSNative (cx=cx@entry=0x7ffff5e3c200, native=<optimized out>, reason=<optimized out>, args=...) at /home/msf3/trees/firefox/js/src/vm/Interpreter.cpp:504
#2  0x00005555572ca336 in js::InternalCallOrConstruct (cx=0x7ffff5e3c200, args=..., construct=construct@entry=js::NO_CONSTRUCT, reason=js::CallReason::Call)
    at /home/msf3/trees/firefox/js/src/vm/Interpreter.cpp:597
#3  0x00005555572cb098 in InternalCall (cx=<optimized out>, args=..., reason=504) at /home/msf3/trees/firefox/js/src/vm/Interpreter.cpp:664
#4  0x00005555572ddf79 in js::CallFromStack (cx=0x7ffff7805700 <_IO_stdfile_2_lock>, args=..., reason=<optimized out>) at /home/msf3/trees/firefox/js/src/vm/Interpreter.cpp:669
#5  js::Interpret (cx=0x7ffff5e3c200, state=...) at /home/msf3/trees/firefox/js/src/vm/Interpreter.cpp:3287
/snip

The first bad revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/0f865cd9c1d9
user:        Ryan Hunt
date:        Mon Jul 14 15:10:33 2025 +0000
summary:     Bug 1976559 - Add rudimentary setTimeout support to the JS shell. r=yury

Run with --fuzzing-safe --no-threads --no-baseline --no-ion, compile with AR=ar sh ../configure --enable-debug --enable-debug-symbols --with-ccache --enable-nspr-build --enable-ctypes --enable-gczeal --enable-rust-simd --disable-tests, tested on gh rev 50c83688a650a701ff558b0218a0a864df9dafa0.

This is unlikely to be s-s. Ryan, is bug 1976559 a likely regressor?

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1976559

Comment 2

[Dianna Smith [:diannaS]]

do we know a severity here in regards to 142?

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Set release status flags based on info from the regressing bug 1976559

Comment 4

[Nicolas B. Pierron [:nbp]]

Given that this is only in the shell directory, the severity should probably be low.

Comment 5

[Ryan Hunt [:rhunt]]

Attachment: Bug 1982158 - Fix OOM handling in setTimeout. r?yury

Comment 6

[Donal Meehan [:dmeehan]]

This is the final week of Fx144 Nightly. Fx144 goes to Beta on 2025-09-15.

:rhunt, do you plan on landing this in time to ride the train with Fx144?

Comment 7

[Ryan Hunt [:rhunt]]

Landing this now.

Comment 8

[Pulsebot]

Pushed by [e-mail]:
https://github.com/mozilla-firefox/firefox/commit/9bd4e68b071a
https://hg.mozilla.org/integration/autoland/rev/1466a52e8c04
Fix OOM handling in setTimeout. r=yury

Comment 9

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/1466a52e8c04