483483 - TM: Crash with JIT chrome enabled [@ js_Interpret ]

Status: RESOLVED DUPLICATE of bug 483485

(Core :: JavaScript Engine, defect)

Description

[IU]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20090314 Firefox/3.0
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2a1pre) Gecko/20090314 Minefield/3.2a1pre

If JIT chrome is enabled, visiting the linked URL (or opening the attached test case) results in a crash.

http://crash-stats.mozilla.com/report/index/d681c3cf-b723-4cd9-b053-816da2090314

This is a recent regression, but I don't have time to search now.


Reproducible: Always

Steps to Reproduce:
1. Download and extract the attached file
2. Double-click xul.html
3. Minefield crashes

Comment 1

[IU]

Attachment: test case

Comment 2

[Dave Garrett]

Stack also reported for /index.html in bug 481302 comment 7.

bp-d681c3cf-b723-4cd9-b053-816da2090314
0  	js3250.dll  	js_Interpret  	 js/src/jsinterp.cpp:4356
1 	js3250.dll 	js_Invoke 	js/src/jsinterp.cpp:1330
2 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1608
3 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:561
4 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
5 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
6 	xul.dll 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1079
7 	xul.dll 	nsEventListenerManager::HandleEvent 	content/events/src/nsEventListenerManager.cpp:1176