Closed Bug 471056 Opened 17 years ago Closed 17 years ago

TM: Firefox crashes at above URL with content JIT enabled [@ js_HashString]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 465214

People

(Reporter: martin_packer, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

Crash Data

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20081224 Minefield/3.2a1pre Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20081224 Minefield/3.2a1pre ID:20081224034752 Playing with JIT enablement settings and discovered it's content JIT enablement that makes this page crash firefox. Reports duly sent off. Reproducible: Always Steps to Reproduce: 1.Go to dojo themeTester.html in /dijit/themes and load 2. 3. Actual Results: Green / white "loading" box may appear (sometimes doesn't). Browser then crashes. Expected Results: A page full of dojo widgets should show up. And, obviously, there should've been no crash.
i can confirm this Signature js_HashString UUID 0c51221f-f01a-499c-a9c4-49a632081224 Time 2008-12-24 08:48:54-08 Uptime 58 Last Crash 160873 seconds before submission Product Firefox Version 3.2a1pre Build ID 20081224034752 Branch 1.9.2 OS Windows NT OS Version 5.1.2600 Service Pack 3 CPU x86 CPU Info GenuineIntel family 15 model 2 stepping 9 Crash Reason EXCEPTION_ACCESS_VIOLATION Crash Address 0x3ac000 Comments http://download.dojotoolkit.org/release-1.2.3/dojo-release-1.2.3/dijit/themes/templateThemeTest.html Frame Module Signature Source 0 js3250.dll js_HashString js/src/jsstr.cpp:3115 1 js3250.dll HashDouble prolly a dupe of bug 465214. i'm gonna check this with a recent TM build.
Assignee: nobody → general
URL: http://localhost/dojo-release-1.2.3/d... → http://download.dojotoolkit.org/relea...
Component: General → JavaScript Engine
Product: Firefox → Core
QA Contact: general → general
Summary: Firefox crashes at above URL with content JIT enabled → TM: Firefox crashes at above URL with content JIT enabled [@ js_HashString]
Version: unspecified → Trunk
ok, this is fixed in TM build Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20081224 Minefield/3.2a1pre ID:20081224021447 Built from http://hg.mozilla.org/tracemonkey/rev/09997a70e4fb => marking as dupe. @Martin Packer: this is fixed as soon as bug 465214 lands on MC, will be fixed on gecko1.9.1 branch too as it seems.
Status: UNCONFIRMED → RESOLVED
Closed: 17 years ago
Keywords: crash
Resolution: --- → DUPLICATE
Crash Signature: [@ js_HashString]
You need to log in before you can comment on or make changes to this bug.