455392 - TM: crash on http://apple.com/itunes/overview/ [@ js_ExecuteRegExp]

Status: RESOLVED DUPLICATE of bug 454682

(Core :: JavaScript Engine, defect)

Description

[RFLazaro]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080915032512 Minefield/3.1b1pre
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080915032512 Minefield/3.1b1pre

Browser crashes on loading http://apple.com/itunes/overview/

Reproducible: Always

Steps to Reproduce:
1. Load http://apple.com/itunes/overview/
2.
3.
Actual Results:  
Browser does not finish loading and crashes

Expected Results:  
Load the web page

http://crash-stats.mozilla.com/report/index/ddfdd400-8365-11dd-9faa-0013211cbf8a
http://crash-stats.mozilla.com/report/index/ebed5891-8365-11dd-a77c-001cc45a2ce4
http://crash-stats.mozilla.com/report/index/0be836a6-8366-11dd-ad8a-001cc4e2bf68
http://crash-stats.mozilla.com/report/index/496c8be6-8366-11dd-b013-001a4bd43e5c

Comment 1

[RFLazaro]

Forgot to add:

JIT enabled CRASHES
JIT disabled WORKS

Comment 2

[RFLazaro]

Confirmed crash in earlier build, Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080914034157 Minefield/3.1b1pre

See http://forums.mozillazine.org/viewtopic.php?p=4479125#p4479125

Comment 3

[RFLazaro]

WORKS: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080909032504 Minefield/3.1b1pre

CRASHES: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1b1pre) Gecko/20080910043000 Minefield/3.1b1pre

Regression range?
http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=9%2F9%2F08&enddate=9%2F10%2F08

Comment 4

[(mostly gone) XtC4UaLL [:xtc4uall]]

it's a pitty that crash reports do not get processed anymore these days, so unsure about the crashes stack and if it's a dupe.

Comment 5

[RFLazaro]

Signature is js_ExecuteRegExp from http://crash-stats.mozilla.com/report/index/ebed5891-8365-11dd-a77c-001cc45a2ce4

Comment 6

[(mostly gone) XtC4UaLL [:xtc4uall]]

Signature	js_ExecuteRegExp
UUID	ddfdd400-8365-11dd-9faa-0013211cbf8a
Time	2008-09-15 13:35:35-07
Uptime	20
Product	Firefox
Version	3.1b1pre
Build ID	20080915032512
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 15 model 2 stepping 9
Crash Reason	EXCEPTION_ACCESS_VIOLATION
Crash Address	0x3a7000
Comments	Crash on apple site

Frame 	Module 	Signature 	Source
0 	js3250.dll 	js_ExecuteRegExp 	js/src/jsregexp.cpp:3485
1 	js3250.dll 	match_or_replace 	js/src/jsstr.cpp:1324
2 	js3250.dll 	js_StringMatchHelper 	js/src/jsstr.cpp:1383
3 	js3250.dll 	js_String_p_match(JSContext*,JSString*,unsigned char*,JSObject*) 	js/src/jsbuiltins.cpp:305
4 		@0x379ff5a 	
5 		@0x3f4f1ff 	
6 	js3250.dll 	js_ExecuteTree 	js/src/jstracer.cpp:2349
7 	js3250.dll 	js_MonitorLoopEdge(JSContext*,unsigned char*,unsigned int&) 	js/src/jstracer.cpp:2502
8 	js3250.dll 	js3250.dll@0x69a89 	
9 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1324
10 	js3250.dll 	js_fun_apply(JSContext*,unsigned int,long*) 	js/src/jsfun.cpp:1731
11 	js3250.dll 	js_Interpret 	js/src/jsinterp.cpp:4960
12 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1324
13 	js3250.dll 	array_extra 	js/src/jsarray.cpp:2772
14 	js3250.dll 	array_forEach 	js/src/jsarray.cpp:2828
15 	js3250.dll 	js_Interpret 	js/src/jsinterp.cpp:4960
16 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1324
17 	js3250.dll 	js_fun_apply(JSContext*,unsigned int,long*) 	js/src/jsfun.cpp:1731
18 	js3250.dll 	js_Interpret 	js/src/jsinterp.cpp:4960
19 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1324
20 	xul.dll 	nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS*,unsigned short,XPTMethodDescriptor const*,nsXPTCMiniVariant*) 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1523
21 	xul.dll 	nsXPCWrappedJS::CallMethod(unsigned short,XPTMethodDescriptor const*,nsXPTCMiniVariant*) 	js/src/xpconnect/src/xpcwrappedjs.cpp:565
22 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
23 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
24 	xul.dll 	nsEventListenerManager::HandleEventSubType(nsListenerStruct*,nsIDOMEventListener*,nsIDOMEvent*,nsISupports*,unsigned int) 	content/events/src/nsEventListenerManager.cpp:1080

Comment 7

[(mostly gone) XtC4UaLL [:xtc4uall]]

i get a crash with (almost) identical stack loading http://www.tomshardware.com/de/Full-HD-AMD-Chrome-Catalyst-8-8,news-241640.html
bp-81192326-8448-11dd-9587-0013211cbf8a

based on comment 3 this seems to be a regression of http://hg.mozilla.org/mozilla-central/rev/ac2f0278900c

Comment 9

[David Anderson [:dvander] - inactive, e-mail if emergency]

Works for me now.