621570 - Firefox 4.0b9pre crash in [@ js_GetProperty ]

Status: RESOLVED DUPLICATE of bug 619585

(Core :: JavaScript Engine, defect)

Description

[Marcia Knous [:marcia]]

Seen while trying to reproduce Bughunter crashes.

http://crash-stats.mozilla.com/report/index/bp-cf924a1d-5d5d-4b6f-827c-c9e6f2101227

Frame 	Module 	Signature [Expand] 	Source
0 		@0x74c08500 	
1 	XUL 	js_GetProperty 	js/src/jscntxtinlines.h:728
2 	XUL 	js::mjit::stubs::GetElem 	js/src/jsobj.h:1128
3 		@0x1b06ebf1 	
4 	XUL 	js::mjit::JaegerShot 	js/src/methodjit/MethodJIT.cpp:745
5 	XUL 	js::Execute 	js/src/jsinterp.cpp:654
6 	XUL 	JS_EvaluateUCScriptForPrincipals 	js/src/jsapi.cpp:4939
7 	XUL 	JS_EvaluateUCScriptForPrincipalsVersion 	js/src/jsapi.cpp:4915
8 	XUL 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1731
9 	XUL 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:890
10 	XUL 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:783
11 	XUL 	nsScriptLoader::ProcessScriptElement 	content/base/src/nsScriptLoader.cpp:729
12 	XUL 	nsScriptElement::MaybeProcessScript 	content/base/src/nsScriptElement.cpp:180
13 	XUL 	nsHTMLScriptElement::MaybeProcessScript 	content/html/content/src/nsHTMLScriptElement.cpp:583
14 	XUL 	nsHTMLScriptElement::DoneAddingChildren 	content/html/content/src/nsHTMLScriptElement.cpp:510
15 	XUL 	nsHtml5TreeOpExecutor::RunScript 	parser/html/nsHtml5TreeOpExecutor.cpp:730
16 	XUL 	nsHtml5TreeOpExecutor::RunFlushLoop 	parser/html/nsHtml5TreeOpExecutor.cpp:525
17 	XUL 	nsHtml5ExecutorReflusher::Run 	parser/html/nsHtml5TreeOpExecutor.cpp:90
18 	XUL 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:626
19 	XUL 	NS_ProcessPendingEvents_P 	nsThreadUtils.cpp:200
20 	XUL 	nsBaseAppShell::NativeEventCallback 	widget/src/xpwidgets/nsBaseAppShell.cpp:132
21 	XUL 	nsAppShell::ProcessGeckoEvents 	widget/src/cocoa/nsAppShell.mm:399
22 	CoreFoundation 	__CFRunLoopDoSources0 	
23 	CoreFoundation 	__CFRunLoopRun 	
24 	CoreFoundation 	CFRunLoopRunSpecific 	
25 	CoreFoundation 	CFRunLoopRunInMode 	
26 	HIToolbox 	RunCurrentEventLoopInMode 	
27 	HIToolbox 	ReceiveNextEventCommon 	
28 	HIToolbox 	BlockUntilNextEventMatchingListInMode 	
29 	AppKit 	_DPSNextEvent 	
30 	AppKit 	-[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] 	
31 	AppKit 	-[NSApplication run] 	
32 	XUL 	nsAppShell::Run 	widget/src/cocoa/nsAppShell.mm:746
33 	XUL 	nsAppStartup::Run 	toolkit/components/startup/src/nsAppStartup.cpp:191
34 	XUL 	XRE_main 	toolkit/xre/nsAppRunner.cpp:3694
35 	firefox-bin 	main 	browser/app/nsBrowserApp.cpp:158
36 	firefox-bin 	firefox-bin@0xa05 	
37 		@0x1

Comment 1

[Marcia Knous [:marcia]]

In looking more closely, this appears to be a dupe of Bug 619585.