crash JSObject::ensureDenseArrayElements

NEW
Unassigned

Status

()

Core
JavaScript Engine
--
critical
7 years ago
3 years ago

People

(Reporter: mfinkle, Unassigned)

Tracking

({crash})

Trunk
All
Linux
crash
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

This bug was filed from the Socorro interface and is 
report bp-f6ae74c6-1136-42d8-9834-d77bf2110620 .
============================================================= 

0 		@0x41c706d0 	
1 	libxul.so 	JSObject::ensureDenseArrayElements 	js/src/jsarrayinlines.h:128
2 		@0xfffe 	
3 	libxul.so 	js::mjit::JaegerShotAtSafePoint 	js/src/jscntxt.h:2213
4 	libxul.so 	js::Interpret 	js/src/vm/Stack.h:1057
5 	libxul.so 	js::RunScript 	js/src/jsinterp.cpp:621
6 	libxul.so 	js::Execute 	js/src/jsinterp.cpp:1005
7 	libxul.so 	JS_EvaluateUCScriptForPrincipalsVersion 	js/src/jsapi.cpp:4998
8 	libxul.so 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1461
9 	libxul.so 	nsScriptLoader::EvaluateScript 	nsCOMPtr.h:655
10 	libxul.so 	nsScriptLoader::ProcessRequest 	nsCOMPtr.h:800
11 	libxul.so 	nsScriptLoader::ProcessScriptElement 	content/base/src/nsScriptLoader.cpp:745
12 	libxul.so 	nsScriptElement::MaybeProcessScript 	content/base/src/nsScriptElement.cpp:187
13 	libxul.so 	nsHTMLScriptElement::MaybeProcessScript 	content/html/content/src/nsHTMLScriptElement.cpp:587
14 	libxul.so 	nsHTMLScriptElement::DoneAddingChildren 	content/html/content/src/nsHTMLScriptElement.cpp:514
15 	libxul.so 	nsHtml5TreeOpExecutor::RunScript 	parser/html/nsHtml5TreeOpExecutor.cpp:734
16 	libxul.so 	nsHtml5TreeOpExecutor::FlushDocumentWrite 	nsCOMPtr.h:492
17 	libxul.so 	nsHtml5Parser::Parse 	parser/html/nsHtml5Parser.cpp:356
18 	libxul.so 	nsHTMLDocument::WriteCommon 	content/html/document/src/nsHTMLDocument.cpp:1942
19 	libxul.so 	nsHTMLDocument::Write 	content/html/document/src/nsHTMLDocument.cpp:1956
20 	libxul.so 	nsIDOMHTMLDocument_Write 	obj-firefox/js/src/xpconnect/src/dom_quickstubs.cpp:17486
21 	libxul.so 	js::Interpret 	js/src/jsinterp.cpp:4774
22 	libxul.so 	js::Invoke 	js/src/jsinterp.cpp:621
23 	libxul.so 	js::ExternalInvoke 	js/src/jsinterp.cpp:842
24 	libxul.so 	JS_CallFunctionValue 	js/src/jsapi.cpp:5112
25 	libxul.so 	nsJSContext::CallEventHandler 	dom/base/nsJSEnvironment.cpp:1909
26 	libxul.so 	nsGlobalWindow::RunTimeout 	nsCOMPtr.h:888
27 	libxul.so 	nsGlobalWindow::TimerCallback 	dom/base/nsGlobalWindow.cpp:9585
28 	libxul.so 	nsTimerImpl::Fire 	xpcom/threads/nsTimerImpl.cpp:425
29 	libxul.so 	nsTimerEvent::Run 	nsAutoPtr.h:969
30 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:618
31 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
32 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:134
33 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:230
34 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
35 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
36 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
37 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:671
38 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:222
39 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:219
40 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:511
41 	libxul.so 	XRE_InitChildProcess 	toolkit/xre/nsEmbedFunctions.cpp:514
42 	libmozutils.so 	ChildProcessInit 	other-licenses/android/APKOpen.cpp:799
43 	plugin-container 	main 	ipc/app/MozillaRuntimeMainAndroid.cpp:69
(Reporter)

Updated

7 years ago
Assignee: nobody → general
Component: General → JavaScript Engine
Product: Fennec → Core
QA Contact: general → general
(Assignee)

Updated

3 years ago
Assignee: general → nobody
You need to log in before you can comment on or make changes to this bug.