Closed Bug 716900 Opened 13 years ago Closed 13 years ago

Crash on Javascript heavy site

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
9 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla12
Tracking Flags:
Tracking Status
firefox9 --- affected
firefox10 --- fixed
firefox11 --- fixed
firefox12 --- fixed

People

(Reporter: alain.deschenes, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression, reproducible)

Crash Data

User Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; CMNTDF; BRI/1; .NET4.0C; MS-RTC LM 8) Steps to reproduce: 1. In address bar, type: http://www.jam.ca/sareport_html/ and press <Enter> 2. Click on Activity tab. Actual results: Firefox segfault. Expected results: A dynamically generated page should have been displayed. The self-contained site can be downloaded from http://www.jam.ca/sareport_html/sareport_html.zip
URL: http://www.jam.ca/sareport_html/
Crash Signature: AdapterDeviceID: 0a6c AdapterVendorID: 10de Add-ons: bettergmail2@ginatrapani.org:1.2,testpilot@labs.mozilla.com:1.2,{37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.2,{3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.15.1 {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:2.…
I can reproduce in 9.0.1, 10.0b3, 11.0a2 but not in 12.0a1.
Assignee: nobody → general
Blocks: SadJägerMonkey
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: AdapterDeviceID: 0a6c AdapterVendorID: 10de Add-ons: bettergmail2@ginatrapani.org:1.2,testpilot@labs.mozilla.com:1.2,{37E4D8EA-8BDA-4831-8EA1-89053939A250}:3.0.0.2,{3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.15.1 {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:2.… → [@ js::mjit::EnterMethodJIT(JSContext*, js::StackFrame*, void*, JS::Value*, bool)]
status-firefox10: --- → affected
status-firefox11: --- → affected
status-firefox12: --- → unaffected
status-firefox9: --- → affected
Component: Untriaged → JavaScript Engine
Ever confirmed: true
Keywords: crash, reproducible
Product: Firefox → Core
QA Contact: untriaged → general
Version: 10 Branch → 9 Branch
Regression window(m-c) Works: http://hg.mozilla.org/mozilla-central/rev/d6d6656d8bc6 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110904 Firefox/9.0a1 ID:20110904035336 Crashes: http://hg.mozilla.org/mozilla-central/rev/ca5ce4ebff75 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110904 Firefox/9.0a1 ID:20110904130314 Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=d6d6656d8bc6&tochange=ca5ce4ebff75 Regression window(m-i) Works: http://hg.mozilla.org/integration/mozilla-inbound/rev/d1d3ad947e9f Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110903 Firefox/9.0a1 ID:20110903104140 Crashes: http://hg.mozilla.org/integration/mozilla-inbound/rev/6e67cafd75c8 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0a1) Gecko/20110903 Firefox/9.0a1 ID:20110903132745 Pushlog: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=d1d3ad947e9f&tochange=6e67cafd75c8 Triggered by: 6e67cafd75c8 Jan de Mooij — Bug 670493 - Refactor and optimize booleanJumpScript. r=bhackett
Blocks: 670493
Keywords: regression
Fixed window(m-c): Crashes; http://hg.mozilla.org/mozilla-central/rev/57a33c9f08b1 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a1) Gecko/20120106 Firefox/12.0a1 ID:20120106111823 Works: http://hg.mozilla.org/mozilla-central/rev/5a446202be5f Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a1) Gecko/20120107 Firefox/12.0a1 ID:20120107031040 Fixed pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=57a33c9f08b1&tochange=5a446202be5f Fixed window(m-i): Crashes; http://hg.mozilla.org/integration/mozilla-inbound/rev/f5afa1e3faa9 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a1) Gecko/20120105 Firefox/12.0a1 ID:20120105183823 Works: http://hg.mozilla.org/integration/mozilla-inbound/rev/6c3cea75e5ba Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a1) Gecko/20120105 Firefox/12.0a1 ID:20120105191423 Fixed pushlog: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=f5afa1e3faa9&tochange=6c3cea75e5ba Fixed by: 6c3cea75e5ba Brian Hackett — Fix bug 715662.
I am able to reproduce this occasionally on OSX after exiting PB mode.
(In reply to Honza Bambas (:mayhemer) from comment #4) > I am able to reproduce this occasionally on OSX after exiting PB mode. It's a different issue as this bug is fixed by bug 715662. Please file a new bug blocking bug 595351.
Status: NEW → RESOLVED
Closed: 13 years ago
status-firefox10: affected → fixed
status-firefox11: affected → fixed
status-firefox12: unaffected → fixed
Depends on: 715662
Resolution: --- → FIXED
Target Milestone: --- → mozilla12
You need to log in before you can comment on or make changes to this bug.