480335 - Crash when typing anything in the address bar if javascript.options.jit.chrome is true

Status: RESOLVED DUPLICATE of bug 479053

(Firefox :: General, defect)

Description

[darin-mozilla]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1b3pre) Gecko/20090226 Shiretoko/3.1b3pre
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1b3pre) Gecko/20090226 Shiretoko/3.1b3pre

If javascript.options.jit.chrome is true then typing anything into the address bar (even about:config) will result in a crash. This is utterly repeatable and inevitable. This has been going on for the last week and a half, and continues to be true in the latest nightlies for both 3.1b3pre and 3.2alpha1pre on both Mac and Windows. Turning this option off makes the problem go away.

Reproducible: Always

Steps to Reproduce:
1. Go to about:config
2. Search for JIT
3. Set javascript.options.jit.chrome to true
4. Begin typing anything into the address bar; within an eighth of a second or so, the browser will crash. If you're a really fast typist, you can maybe type anywhere from 1-5 characters before the crash occurs.
Actual Results:  
Crash

Expected Results:  
No crash

Comment 2

[darin-mozilla]

This bug has definitely -not- been fixed as has been claimed. I am getting this crash with even the most currently nightlies.

Comment 3

[Steve England [:stevee]]

It's a dupe, please don't change this bugs status again. The chain takes us down to bug 472450 which you can see does not have the fixed1.9.1 keyword, so everyone is aware it is not yet fixed on the 1.9.1 branch. It is however fixed on the trunk and on the tracemonkey branch.

Comment 4

[Steve England [:stevee]]

Darin for your crashes on trunk can you provide a breakpad ID (about:crashes -- assuming you get breakpad appear when you crash and have submitted the data) so we can see the crash stack.. i hate to have made a mistake in triaging this bug..