499349 - [Crash] TM: js_MonitorLoopEdge(JSContext*, unsigned int&)

Status: RESOLVED DUPLICATE of bug 499169

(Core :: JavaScript Engine, defect)

Description

[ng.sick.no]

User-Agent:       Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1) Gecko/20090616 Firefox/3.5
Build Identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1) Gecko/20090616 Firefox/3.5

When set to javascript.options.jit.content = true and visit various ajax heavy websites, firefox crashes, but when javascript.options.jit.content is false, the browser does not crash. This seems to be either the fix of Bug 480822 was not complete or a regression?

Please refer to:
a667e02a-df6e-43f2-80b2-f9f3b2090619
e29de307-aa21-4de8-883a-9b6752090617
a47a0ba9-fb86-448e-8aaa-ea87d2090619

Or the crash-stats:
http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A3.5&platform=mac&query_search=signature&query_type=exact&query=&date=&range_value=1&range_unit=weeks&do_query=1&signature=js_MonitorLoopEdge%28JSContext*%2C%20unsigned%20int%26%29


Reproducible: Always

Comment 1

[Brendan Eich [:brendan]]

Dup of bug 499169 ?

/be

Comment 2

[(mostly gone) XtC4UaLL [:xtc4uall]]

according to
http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A3.5&query_search=signature&query_type=contains&query=&date=&range_value=24&range_unit=hours&do_query=1&signature=js_MonitorLoopEdge%28JSContext*%2C%20unsigned%20int%26%29
this is 3.5's topcrash atm and OS:ALL

Comment 3

[Robert Sayre]

(In reply to comment #1)
> Dup of bug 499169 ?

Yes, probably. [e-mail], do you have firebug running?

Comment 4

[ng.sick.no]

No, I don't and I am not authorized to access bug #499169

Comment 6

[Martijn Wargers (dead)]

[e-mail], on which ajax heavy sites are you crashing?