Crash Report [@ js::Shape::entryCount() ]

RESOLVED INCOMPLETE

Status

()

--
critical
RESOLVED INCOMPLETE
8 years ago
a year ago

People

(Reporter: cbook, Unassigned)

Tracking

({crash, testcase-wanted})

Trunk
x86
Windows XP
crash, testcase-wanted
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature, URL)

(Reporter)

Description

8 years ago
Firefox 4.0b9pre Crash Report [@ js::Shape::entryCount() ] seems to be a new crash - signature seen in 20110109030350 and not in the last 2 weeks before.

http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&date=2011-01-10%2006%3A00%3A00&signature=js%3A%3AShape%3A%3AentryCount%28%29&version=Firefox%3A4.0b9pre

no comments for reproducing so far.

Crashing Thread
Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js::Shape::entryCount 	js/src/jsscope.h:623
1 	mozjs.dll 	js::Shape::hashify 	js/src/jsscope.cpp:189
2 	mozjs.dll 	JSObject::nativeSearch 	js/src/jsscope.h:672
3 	mozjs.dll 	js_GetProperty 	js/src/jsobj.cpp:5355
4 	mozjs.dll 	js::mjit::ic::GetProp 	js/src/methodjit/PolyIC.cpp:1749
5 	mozjs.dll 	js::mjit::stubs::GetProp 	js/src/methodjit/PolyIC.cpp:1927
6 	xul.dll 	xpcObjectHelper::~xpcObjectHelper 	
7 	mozjs.dll 	js::mjit::EnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:748
8 	mozjs.dll 	CheckStackAndEnterMethodJIT 	js/src/methodjit/MethodJIT.cpp:774
9 	mozjs.dll 	js::mjit::JaegerShot 	js/src/methodjit/MethodJIT.cpp:791
10 	mozjs.dll 	js::RunScript 	js/src/jsinterp.cpp:654
11 	mozjs.dll 	js::Invoke 	js/src/jsinterp.cpp:737
12 	mozjs.dll 	js::ExternalInvoke 	js/src/jsinterp.cpp:858
13 	mozjs.dll 	JS_CallFunctionValue 	js/src/jsapi.cpp:5009
14 	xul.dll 	nsXPCWrappedJSClass::CallMethod 	js/src/xpconnect/src/xpcwrappedjsclass.cpp:1700
15 	xul.dll 	nsXPCWrappedJS::CallMethod 	js/src/xpconnect/src/xpcwrappedjs.cpp:588
16 	xul.dll 	PrepareAndDispatch 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114
17 	xul.dll 	SharedStub 	xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141
18 	xul.dll 	nsDOMWorkerMessageHandler::DispatchEvent 	dom/src/threads/nsDOMWorkerMessageHandler.cpp:329
Need to dig into the minidumps if available. Crash addresses are Not Good.

/be
Group: core-security
OS: Windows 7 → Windows XP

Updated

8 years ago
Whiteboard: [sg:needinfo]
(Assignee)

Updated

7 years ago
Crash Signature: [@ js::Shape::entryCount() ]

Comment 2

7 years ago
Anyone want to pick this up? Is it still a problem?
(In reply to Josh Aas (Mozilla Corporation) from comment #2)
> Anyone want to pick this up? Is it still a problem?

It doesn't look pressing: low volume, and address is almost always 0x4, so it's basically an NPE.
Group: javascript-core-security
Group: javascript-core-security
(Assignee)

Updated

4 years ago
Assignee: general → nobody

Updated

3 years ago
Group: core-security → javascript-core-security

Updated

3 years ago
Crash Signature: [@ js::Shape::entryCount() ] → [@ js::Shape::entryCount() ] [@ js::Shape::entryCount ]
(In reply to David Mandelin [:dmandelin] from comment #3)
> It doesn't look pressing: low volume, and address is almost always 0x4, so it's basically an NPE.

Agreed it's low volume, but the address is almost never near-null. A few of the crashes are breakpoints -- maybe that will be a clue?
Crash Signature: [@ js::Shape::entryCount() ] [@ js::Shape::entryCount ] → [@ js::Shape::entryCount ] [@ js::Shape::entryCount() ]
Keywords: testcase-wanted
Summary: Firefox 4.0b9pre Crash Report [@ js::Shape::entryCount() ] → Crash Report [@ js::Shape::entryCount() ]
Whiteboard: [sg:needinfo]
Group: javascript-core-security
Status: NEW → RESOLVED
Last Resolved: a year ago
Resolution: --- → INCOMPLETE
Unhiding so it can be found by crash-stats reports if someone wants to pick this up in the future.
You need to log in before you can comment on or make changes to this bug.