Closed Bug 604944 Opened 9 years ago Closed 9 years ago

new crash starting in 20101015 nightlies [@js_GetReservedSlot(JSContext*, JSObject*, unsigned long, js::Value*)]

Categories

(Core :: JavaScript Engine, defect, critical)

x86
Windows 7
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: beltzner, Unassigned)

Details

(Keywords: crash)

Crash Data

http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=js_GetReservedSlot%28JSContext*%2C%20JSObject*%2C%20unsigned%20long%2C%20js%3A%3AValue*%29&date=10%2F16%2F2010%2020%3A17%3A22&range_value=1&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=js_GetReservedSlot%28JSContext*%2C%20JSObject*%2C%20unsigned%20long%2C%20js%3A%3AValue*%29

Example stack:
http://crash-stats.mozilla.com/report/index/7a8573d7-bd0a-45e3-b17a-b3eac2101016

0 	mozjs.dll 	js_GetReservedSlot 	js/src/jsobj.cpp:6329
1 	mozjs.dll 	js::Shape::set 	js/src/jsscopeinlines.h:275
2 	mozjs.dll 	js_NativeSet 	js/src/jsobj.cpp:4998
3 	mozjs.dll 	js_SetPropertyHelper 	js/src/jsobj.cpp:5465
4 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4417
5 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:638
6 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:747
7 	mozjs.dll 	js_fun_call 	js/src/jsfun.cpp:2248
8 	mozjs.dll 	js::Interpret 	js/src/jsinterp.cpp:4714
9 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:638
10 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:747
11 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:871
12 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:4961
13 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1692
14 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:571
15 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
16 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
17 	xul.dll 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:428

This came after Andreas and Blake pushed some wrapper changes in bug 604363 and bug 604361 (from the set of checkins that went into the Oct 15 nightly: http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=2010-10-14&enddate=2010-10-15 )
Severity: normal → critical
Keywords: crash
I don't think we're seeing this any more, are we?
Crash Signature: [@js_GetReservedSlot(JSContext*, JSObject*, unsigned long, js::Value*)]
You need to log in before you can comment on or make changes to this bug.