681109 - crash [@ js::RegExp::compileHelper]

Status: RESOLVED WONTFIX

(Core :: JavaScript Engine, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-107ef5fc-675f-44cf-a8a0-b0b7c2110822 .
============================================================= 
Frame 	Module 	Signature [Expand] 	Source
0 	libxul.so 	js::RegExp::compileHelper 	js/src/jsvector.h:286
1 	libxul.so 	js::RegExp::createObjectNoStatics 	js/src/jsregexpinlines.h:511
2 	libxul.so 	js::Parser::primaryExpr 	js/src/jsregexpinlines.h:432
3 	libxul.so 	js::Parser::memberExpr 	js/src/jsparse.cpp:7487
4 	libxul.so 	js::Parser::unaryExpr 	js/src/jsparse.cpp:6703
5 	libxul.so 	js::Parser::assignExpr 	js/src/jsparse.cpp:6292
6 	libxul.so 	js::Parser::variables 	js/src/jsparse.cpp:6194
7 	libxul.so 	js::Parser::statement 	js/src/jsparse.cpp:5961
8 	libxul.so 	js::Parser::statements 	js/src/jsparse.cpp:3482
9 	libxul.so 	js::Parser::functionBody 	js/src/jsparse.cpp:1518
10 	libxul.so 	js::Parser::functionDef 	js/src/jsparse.cpp:3207
11 	libxul.so 	js::Parser::functionExpr 	js/src/jsparse.cpp:3376
12 	libxul.so 	js::Parser::primaryExpr 	js/src/jsparse.cpp:8391
13 	libxul.so 	js::Parser::memberExpr 	js/src/jsparse.cpp:7487
14 	libxul.so 	js::Parser::unaryExpr 	js/src/jsparse.cpp:6703
15 	libxul.so 	js::Parser::assignExpr 	js/src/jsparse.cpp:6292
16 	libxul.so 	js::Parser::expr 	js/src/jsparse.cpp:6247
17 	libxul.so 	js::Parser::bracketedExpr 	js/src/jsparse.cpp:7692
18 	libxul.so 	js::Parser::parenExpr 	js/src/jsparse.cpp:9009
19 	libxul.so 	js::Parser::primaryExpr 	js/src/jsparse.cpp:8748
20 	libxul.so 	js::Parser::memberExpr 	js/src/jsparse.cpp:7487
21 	libxul.so 	js::Parser::unaryExpr 	js/src/jsparse.cpp:6703
22 	libxul.so 	js::Parser::assignExpr 	js/src/jsparse.cpp:6292
23 	libxul.so 	js::Parser::variables 	js/src/jsparse.cpp:6194
24 	libxul.so 	js::Parser::statement 	js/src/jsparse.cpp:5961
25 	libxul.so 	js::Compiler::compileScript 	js/src/jsparse.cpp:1031
26 	libxul.so 	EvaluateUCScriptForPrincipalsCommon 	js/src/jsapi.cpp:4920
27 	libxul.so 	JS_EvaluateUCScriptForPrincipalsVersion 	js/src/jscntxt.h:1045
28 	libxul.so 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1451
29 	libxul.so 	nsScriptLoader::EvaluateScript 	nsCOMPtr.h:655
30 	libxul.so 	nsScriptLoader::ProcessRequest 	nsCOMPtr.h:800
31 	libxul.so 	nsScriptLoader::ProcessScriptElement 	content/base/src/nsScriptLoader.cpp:646
32 	libxul.so 	nsScriptElement::MaybeProcessScript 	content/base/src/nsScriptElement.cpp:187
33 	libxul.so 	nsHTMLScriptElement::MaybeProcessScript 	content/html/content/src/nsHTMLScriptElement.cpp:336
34 	libxul.so 	nsHTMLScriptElement::DoneAddingChildren 	content/html/content/src/nsHTMLScriptElement.cpp:261
35 	libxul.so 	nsHtml5TreeOpExecutor::RunScript 	parser/html/nsHtml5TreeOpExecutor.cpp:737
36 	libxul.so 	nsHtml5TreeOpExecutor::RunFlushLoop 	parser/html/nsHtml5TreeOpExecutor.cpp:531
37 	libxul.so 	nsHtml5ExecutorReflusher::Run 	parser/html/nsHtml5TreeOpExecutor.cpp:93
38 	libxul.so 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:631
39 	libxul.so 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:245
40 	libxul.so 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:111
41 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:230
42 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:222
43 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:514
44 	libxul.so 	nsBaseAppShell::Run 	widget/src/xpwidgets/nsBaseAppShell.cpp:191
45 	libxul.so 	XRE_RunAppShell 	toolkit/xre/nsEmbedFunctions.cpp:673
46 	libxul.so 	mozilla::ipc::MessagePumpForChildProcess::Run 	ipc/glue/MessagePump.cpp:222
47 	libxul.so 	MessageLoop::RunInternal 	ipc/chromium/src/base/message_loop.cc:222
48 	libxul.so 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:514
49 	libxul.so 	XRE_InitChildProcess 	nsAutoPtr.h:155
50 	libmozutils.so 	ChildProcessInit 	other-licenses/android/APKOpen.cpp:796
51 	plugin-container 	main 	ipc/app/MozillaRuntimeMainAndroid.cpp:69
52 	libc.so 	libc.so@0x14bb4 	

More reports:
https://crash-stats.mozilla.com/report/list?range_value=7&range_unit=days&date=2011-08-22%2011%3A00%3A00&signature=js%3A%3ARegExp%3A%3AcompileHelper&version=Fennec%3A9.0a1

Comment 1

[Chris Leary [:cdleary] (not checking bugmail)]

There's only one crash here and the line numbers are pretty strange -- do we have any STR, preferrably on debug builds?

Comment 2

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

cdleary: no STRs yet.  I can put this in my queue to look into.

URLs: 
http://t.co/baluSQW 
http://www.phonedog.com/2011/08/22/purported-iphone-5-battery-camera-and-audio-flex-cable-images-leak/?utm_source=twitterfeed&utm_medium=twitter&utm_campaign=Feed%3A+phonedog_cellphoneblog+%28PhoneDog.com+Cell+Phone+articles%29
http://www.vegsource.com/talk/raw/index.html

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Closing because no crash reported since 12 weeks.