Closed Bug 557035 Opened 15 years ago Closed 15 years ago

[@ OBJ_TO_INNER_OBJECT ] Crash on JSNES demo page

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 557728
Tracking Flags:
Tracking Status
blocking2.0 --- beta1+

People

(Reporter: pkc, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression)

Crash Data

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.3a4pre) Gecko/20100403 Firefox/3.7a1pre Build Identifier: Crash when the JSNES page is loaded. Reproducible: Always Steps to Reproduce: 1.Go to http://benfirshman.com/projects/jsnes/ Actual Results: Experience crash. Traces, all from trunk(April 03): Windows 7(64bit): http://crash-stats.mozilla.com/report/index/43665caf-4937-46a1-bb58-8f10b2100403 Windows XP: http://crash-stats.mozilla.com/report/index/e4367b1b-d4da-40ab-9cb9-ab3f02100403 Windows XP(no JIT): http://crash-stats.mozilla.com/report/index/b703fb43-7401-4568-af6e-cd96a2100403 3.6.3 does not seem to crash. JIT does not seem to affect the crash.
Confirming crash, setting to NEW
Status: UNCONFIRMED → NEW
Ever confirmed: true
Keywords: regression, regressionwindow-wanted
Signature OBJ_TO_INNER_OBJECT UUID 43665caf-4937-46a1-bb58-8f10b2100403 Time 2010-04-03 15:25:40.72328 Uptime 17 Last Crash 29 seconds before submission Product Firefox Version 3.7a4pre Build ID 20100403051004 Branch 1.9.3 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 26 stepping 5 Crash Reason EXCEPTION_ACCESS_VIOLATION Crash Address 0x77ffcfb0 User Comments Processor Notes Related Bugs Crashing Thread Frame Module Signature [Expand] Source 0 mozjs.dll OBJ_TO_INNER_OBJECT js/src/jsobj.h:561 1 mozjs.dll JS_GetScopeChain js/src/jsapi.cpp:1660 2 xul.dll XPC_WN_JSOp_ThisObject js/src/xpconnect/src/xpcwrappednativejsops.cpp:1491 3 mozjs.dll js_Invoke js/src/jsinterp.cpp:1212 4 mozjs.dll js_InternalInvoke js/src/jsinterp.cpp:1429 5 mozjs.dll js_TryMethod js/src/jsobj.cpp:6479 6 mozjs.dll js_DefaultValue js/src/jsobj.cpp:5670 7 mozjs.dll JSObject::defaultValue js/src/jsobj.h:410 8 mozjs.dll js_ValueToString js/src/jsstr.cpp:3315 9 mozjs.dll js_ReportUncaughtException js/src/jsexn.cpp:1248 10 mozjs.dll JS_ReportPendingException js/src/jsapi.cpp:5604 11 xul.dll nsXPCWrappedJSClass::CheckForException js/src/xpconnect/src/xpcwrappedjsclass.cpp:1146 12 xul.dll nsXPCWrappedJSClass::CallMethod js/src/xpconnect/src/xpcwrappedjsclass.cpp:1736 13 xul.dll nsXPCWrappedJS::CallMethod js/src/xpconnect/src/xpcwrappedjs.cpp:570 14 xul.dll PrepareAndDispatch xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114 15 xul.dll SharedStub xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141 16 xul.dll nsEventListenerManager::HandleEventSubType content/events/src/nsEventListenerManager.cpp:1082
Severity: normal → critical
Keywords: crash
I believe this to be a dupe of Bug 551326 - it just crashes in a slightly different stack.
(In reply to comment #3) > I believe this to be a dupe of Bug 551326 - it just crashes in a slightly > different stack. I get the regression window below. The regression window for bug 551326 (shown in bug 551326 comment 5) is inside this range. So they could be the same. Regression window: works: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.3a3pre) Gecko/20100303 Minefield/3.7a3pre http://hg.mozilla.org/mozilla-central/rev/d50a6e09b8d0 broken: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.3a3pre) Gecko/20100304 Minefield/3.7a3pre http://hg.mozilla.org/mozilla-central/rev/7db1b9d406ef http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=d50a6e09b8d0&tochange=7db1b9d406ef
Keywords: regressionwindow-wanted
blocking2.0: --- → ?
Depends on: 551326
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
blocking2.0: ? → beta1+
Crash Signature: [@ OBJ_TO_INNER_OBJECT ]
You need to log in before you can comment on or make changes to this bug.