451888 - Crash [@ js_ExecuteTree] on C1000, Maaltijdidee

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Martijn Wargers (dead)]

Attachment: unminimized testcase

When I have the jit prefs enabled in the latest trunk build of Firefox
(javascript.options.jit.chrome and javascript.options.jit.content), then I
crash on the site I pasted in the url.

Sorry, I haven't minimized the cause of the crash yet. I'll try to do it tomorrow (if someone else doesn't do it).

http://crash-stats.mozilla.com/report/index/c916cd33-715c-11dd-ba57-001cc45a2c28?p=1
0  	 	@0x59f6f83  	
1 		@0x5a3d01f 	
2 	js3250.dll 	js_ExecuteTree 	js/src/jstracer.cpp:1988
3 	js3250.dll 	js_LoopEdge 	js/src/jstracer.cpp:2124
4 	js3250.dll 	js3250.dll@0x6d5a1 	
5 	js3250.dll 	js_Execute 	js/src/jsinterp.cpp:1549
6 	js3250.dll 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:5054
7 	xul.dll 	nsJSContext::EvaluateString 	dom/src/base/nsJSEnvironment.cpp:1540
8 	xul.dll 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:594
9 	xul.dll 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:504
10 	xul.dll 	nsCOMArray_base::RemoveObject 	obj-firefox/xpcom/build/nsCOMArray.cpp:129
11 	xul.dll 	nsScriptLoader::ProcessPendingRequests 	content/base/src/nsScriptLoader.cpp:654

Comment 1

[Martijn Wargers (dead)]

Attachment: unminimized testcase 2

Comment 2

[Martijn Wargers (dead)]

Seems to be worksforme, using:
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a2pre) Gecko/20080827031643 Minefield/3.1a2pre