605830 - crash [@ js_NewGCObject(JSContext*, js::gc::FinalizeKind) ]

Status: RESOLVED WONTFIX

(Core :: JavaScript Engine, defect)

Description

[Scoobidiver (away)]

Build: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101020 Firefox/4.0b8pre

It is a new crash signature that was introduced by 4.0b8pre/20101015 build.
It is #115 top crasher in 4.0b8pre for the last week.

Signature	js_NewGCObject(JSContext*, js::gc::FinalizeKind)
UUID	3aada462-0ac2-4512-89d1-c13722101019
Time 	2010-10-19 14:07:33.901968
Uptime	1042
Last Crash	1046 seconds (17.4 minutes) before submission
Install Age	25747 seconds (7.2 hours) since version was first installed.
Product	Firefox
Version	4.0b8pre
Build ID	20101019041714
Branch	2.0
OS	Windows NT
OS Version	5.1.2600 Service Pack 2
CPU	x86
CPU Info	GenuineIntel family 15 model 4 stepping 7
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0x5eaba
App Notes 	AdapterVendorID: 1002, AdapterDeviceID: 5960

Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js_NewGCObject 	js/src/jsgcinlines.h:139
1 	mozjs.dll 	js::NewNativeClassInstance 	js/src/jsobjinlines.h:857
2 	mozjs.dll 	js::NewBuiltinClassInstance 	js/src/jsobjinlines.h:928
3 	mozjs.dll 	js_NewDateObjectMsec 	js/src/jsdate.cpp:2565
4 	mozjs.dll 	js_Date 	js/src/jsdate.cpp:2521
5 		@0xcb7fd11 	
6 	mozjs.dll 	js::ExecuteTree 	js/src/jstracer.cpp:6708
7 	mozjs.dll 	js::MonitorTracePoint 	js/src/jstracer.cpp:16523
8 	mozjs.dll 	RunTracer 	js/src/methodjit/InvokeHelpers.cpp:820
9 	mozjs.dll 	js::mjit::stubs::InvokeTracer 	js/src/methodjit/InvokeHelpers.cpp:917
10 	mozjs.dll 	JSCompartment::wrap 	js/src/jscompartment.cpp:133
11 	mozjs.dll 	js::mjit::EnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:742
12 	mozjs.dll 	CheckStackAndEnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:767
13 	mozjs.dll 	js::mjit::JaegerShot 	js/src/methodjit/MethodJIT.cpp:784
14 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:635
15 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:747
16 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:871
17 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:4961
18 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1694
19 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:571
20 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
21 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
22 	xul.dll 	nsEventListenerManager::HandleEventSubType 	content/events/src/nsEventListenerManager.cpp:1112

The regression window is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=ad0a0be8be74&tochange=19cb42fa4554

More reports at:
http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=js_NewGCObject%28JSContext*%2C%20js%3A%3Agc%3A%3AFinalizeKind%29

Comment 1

[Tom S [:evilpie]]

Tracer has been removed.

Comment 2

[Tom S [:evilpie]]

Oh and doesn't appear on crash stats (low overall and not with that stack trace)