449790 - TM: Crash in TraceRecorder::import in YUI code on upcoming.yahoo.com

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Robert Sayre]

This is happening somewhere in their calendar code. Haven't gotten it reduced yet.

Comment 1

[Robert Sayre]

Attachment: native and JS stack traces

Comment 2

[Andreas Gal :gal]

Looks like shaver's variable name printing code.

Comment 3

[Mike Shaver (:shaver -- probably not reading bugmail closely)]

Fixed, I think, by http://hg.mozilla.org/tracemonkey/index.cgi/rev/736964049d9b -- rob, can you re-test?

Comment 4

[Andreas Gal :gal]

I assume this is the proposed fix:

http://hg.mozilla.org/index.cgi/tracemonkey/rev/736964049d9b

Comment 5

[Mike Shaver (:shaver -- probably not reading bugmail closely)]

Yeah -- isn't that what I linked? :)

Comment 6

[Andreas Gal :gal]

I must be blind or something. Meh.

Comment 7

[Robert Sayre]

(In reply to comment #3)
> Fixed, I think, by http://hg.mozilla.org/tracemonkey/index.cgi/rev/736964049d9b
> -- rob, can you re-test?
> 

Still crashing here.

Comment 8

[Andreas Gal :gal]

Can you post the stack dump again?

Comment 9

[Robert Sayre]

Attachment: upcoming crash

Comment 10

[Andreas Gal :gal]

Meh, http://yui.yahooapis.com/2.5.1/build/utilities/utilities.js is fun to read.

Comment 11

[Andreas Gal :gal]

http://hg.mozilla.org/index.cgi/tracemonkey/rev/15d1cccb600f

Please re-test.

Comment 12

[Robert Sayre]

This is fixed, but I filed bug 450317 on a new problem with the same site.