614673 - JS crashes at JS_CompileUCFunctionForPrincipals()

Status: RESOLVED INCOMPLETE

(Core :: JavaScript Engine, defect)

Description

[Lin Chen]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
Build Identifier: mozillajs/1.7

our software uses mozillajs1.7.  It crashed at JS with the following lines as the last two frame:

 	js17_32.dll!_JS_CompileUCFunctionForPrincipals()  + 0x135 bytes	C
 	js17_32.dll!_JS_CompileFunction()  + 0x4e bytes	C

I am wondering what could cause MozillarJS crash at this line and if there is any solutions.

Lin Chen 

Reproducible: Sometimes

Steps to Reproduce:
It is hard to describe the reproduce steps.  Our software is integrated with JS.

Comment 1

[(mostly gone) XtC4UaLL [:xtc4uall]]

Does it crash on a Nightly Build (http://nightly.mozilla.org) crash too?

Comment 2

[timeless]

xtc4uall: this is an embedding case, i'm not sure we even have js as a dll anymore.

reporter: i'm not sure if we provide symbols for js builds -- if we don't, we should. unfortunately, without symbols we can't do much.

since you're building on windows, it would be easier for you to download the sources for js1.7 and build them and then reproduce your crash.

Comment 3

[Lin Chen]

What information do you need if we reproduce the crash?  By symbols, do you mean the pdb file?

Comment 4

[timeless]

yes i mean pdb files.

but since i don't think anyone has pdb files for js17, i think you get to rebuild js17 to generate your own pdb files and then crash against that.

Comment 5

[Lin Chen]

I have the pdb file, which makes me able to look at the frames in side the JS.  What else I can make use of it?

Comment 6

[timeless]

well, use windbg/devenv and load the pdb, then you should get a better stack trace.

i'm available on irc.mozilla.org, hop on irc.

Comment 7

[Lin Chen]

Yes, I got the stack trace by using MSVS:

 	js17_32.dll!_JS_CompileUCFunctionForPrincipals()  + 0x135 bytes	C
 	js17_32.dll!_JS_CompileFunction()  + 0x4e bytes	C
 	libAPPVXML3.dll!JSDOMMethods::JSDOMMethods(JSDOMObject * pJSDOMObj=0x1dadaa60, DOMBuilderWrapper * 

....

what do you mean by a better stacktrace?

What is inc?  How to hop on it?

Comment 8

[timeless]

if you have symbols for js17_32.dll you wouldn't see +0x135 bytes, you'd see arguments for the function plus a filename and line number.

you need to build js17_32.dll yourself.

irc: http://en.wikipedia.org/wiki/Internet_Relay_Chat
you can use this gateway: http://landfill.bugzilla.org/irc/

Comment 9

[Wayne Mery (:wsmwk)]

still needs stack