53509 - hit the root_points_to_gcArenaPool assert in jsgc for "timeout.expr"

Status: VERIFIED DUPLICATE of bug 50705

(Core :: DOM: Core & HTML, defect, P3)

Description

[John Bandhauer]

While running the browser buster I hit the root_points_to_gcArenaPool assert in 
jsgc. The implicated root is: "timeout.expr" ...

.............................................................................
JS API usage error: the address passed to JS_AddNamedRoot currently holds an
invalid jsval.  This is usually caused by a missing call to JS_RemoveRoot.
The root's name is "timeout.expr".
............................................................................

http://lxr.mozilla.org/seamonkey/search?string=timeout.exp

I *think* it was on http://www.warnerbros.com

I could not repeat this.

I'm suspicious of corruption because this site used the Shockwave plugin 
implicated in bug 52342 where FIM (free invalid memory) errors happen. 

I'll attach the stack.

Comment 1

[John Bandhauer]

Attachment: stack at assert

Comment 2

[John Bandhauer]

marking this as a dup.

*** This bug has been marked as a duplicate of 50705 ***

Comment 3

[Scott Brodmerkle]

Verified dupe.