Closed Bug 503650 Opened 16 years ago Closed 10 years ago

Crash [@ fun_trace]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
1.9.1 Branch
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME
Tracking Flags:
Tracking Status
status1.9.1 --- wanted

People

(Reporter: gkw, Unassigned)

Details

(Keywords: crash, testcase-wanted, Whiteboard: [needs STR or input on whether the stack trace is useful in fixing the issue])

Crash Data

Topcrash for the past day (numbering 104) at #59 for "Results within 1 days of now, and the product is one of Firefox, and the version is one of Firefox:3.5." Most on Windows XP/Vista and using 3.5 final release. http://crash-stats.mozilla.com/report/list?product=Firefox&version=Firefox%3A3.5&query_search=signature&query_type=exact&query=&date=&range_value=1&range_unit=days&do_query=1&signature=fun_trace It'll be cool if there was a list of URLs that crash at this location.
URLs for this bug will be generated in (the confidential to protect user privacy) bug 503726.
Flags: blocking1.9.2?
Flags: blocking1.9.2? → blocking1.9.1.1?
blocking1.9.1: --- → ?
status1.9.1: --- → wanted
Flags: blocking1.9.1.1? → blocking1.9.1.1-
Group: core-security
Wanted for now, not blocking. Can we get an owner here at least to investigate the URLs and try and find a reproducible case?
blocking1.9.1: ? → ---
(In reply to comment #2) > Wanted for now, not blocking. Can we get an owner here at least to investigate > the URLs and try and find a reproducible case? fwiw, I ran the URLs through an automated script to test them on Mac 3.5.1 but didn't crash on any... Didn't try other platforms though.
Whiteboard: [needs STR or input on whether the stack trace is useful in fixing the issue]
I just heard from a Twitter user who crashed in this stack on Windows - http://crash-stats.mozilla.com/report/index/60129a45-0025-48ec-9b09-2b1bd2091029 is the report ID.
I see crashes here in 3.0.x as well. Given it's during GC and we're accessing random values I'm a bit worried we've got a lot of corrupt objects.
Flags: wanted1.9.0.x+
Whiteboard: [needs STR or input on whether the stack trace is useful in fixing the issue] → [sg:critical?][needs STR or input on whether the stack trace is useful in fixing the issue]
This is still #58 top crash overall. I loaded a bunch of the URLs from the list in bug 503726 on Windows and Linux, but could not reproduce. Is there anything we can do with this report at this point?
Group: core-security
Whiteboard: [sg:critical?][needs STR or input on whether the stack trace is useful in fixing the issue] → [needs STR or input on whether the stack trace is useful in fixing the issue]
It is #13 top crasher in 5.0b2 over the last 3 days.
Blocks: 613650
Crash Signature: [@ fun_trace]
(In reply to Scoobidiver from comment #7) > It is #13 top crasher in 5.0b2 over the last 3 days. This signature seems to have disappeared in recent Firefox versions starting from approximately Fx 5.0, and also doesn't seem to show up all the way till version 8.0. Can someone pls verify, then resolve this bug?
There have been only 7 crashes in 7.0.1 over the last month.
No longer blocks: 613650
Keywords: topcrash
Crash Signature: [@ fun_trace] → [@ fun_trace ]
Crash Signature: [@ fun_trace ] → [@ fun_trace]
Assignee: general → nobody
No crashes in fun_trace in the last few years. Probably unrelated heap corruption that got fixed. No STR in any case.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.