726934 - crash js::gc::ScanLinearString

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Marco Zehe (:MarcoZ)]

This bug was filed from the Socorro interface and is 
report bp-7e91be3e-ae4e-462c-a2f8-ec4aa2120213 .
============================================================= 

Reported to me by a community member using Aurora.

Comment 1

[Scoobidiver (away)]

It's #275 top browser crasher in 11.0b2, #69 in 12.0a2 and #211 in 13.0a1.

It first appeared in 11.0a1/20111206.
The regression range is:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=1bd7482ad4d1&tochange=fafaf614791f
It's likely caused by bug 707114 that introduced this code.

Here is the stack for the report in comment 0:
Frame 	Module 	Signature [Expand] 	Source
0 	mozjs.dll 	js::gc::ScanLinearString 	js/src/jsgcmark.cpp:702
1 	mozjs.dll 	js::gc::ScanTypeObject 	js/src/jsgcmark.cpp:968
2 	mozjs.dll 	js::GCMarker::processMarkStackTop 	js/src/jsgcmark.cpp:1061
3 	mozjs.dll 	js::GCMarker::drainMarkStack 	js/src/jsgcmark.cpp:1135
4 	mozjs.dll 	EndMarkPhase 	js/src/jsgc.cpp:2715
5 	mozjs.dll 	MarkAndSweep 	js/src/jsgc.cpp:2879
6 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp:2959
7 	mozjs.dll 	js_GC 	js/src/jsgc.cpp:3014
8 	mozjs.dll 	js::GCForReason 	js/src/jsfriendapi.cpp:134
9 	xul.dll 	nsXPCComponents_Utils::ForceGC 	js/xpconnect/src/XPCComponents.cpp:3603
10 	xul.dll 	NS_InvokeByIndex_P 	xpcom/reflect/xptcall/src/md/win32/xptcinvoke.cpp:102
11 	xul.dll 	XPC_WN_CallMethod 	js/xpconnect/src/XPCWrappedNativeJSOps.cpp:1539
12 		@0x6 

More reports at:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3Agc%3A%3AScanLinearString

Comment 2

[Wayne Mery (:wsmwk)]

Agree, this started in firefox 11.  But no firefox examples in last 2 months of crash-stats newer than version 18. https://crash-stats.mozilla.com/report/list?signature=js%3A%3Agc%3A%3AScanLinearString&product=Firefox&query_type=is_exactly&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-21+12%3A00%3A00&range_value=8   

Unknown yet if this is try of Thunderbird 18, which was never released.  We'll need to judge by what happens when Thunderbird 24 releases. https://crash-stats.mozilla.com/report/list?signature=js%3A%3Agc%3A%3AScanLinearString&product=Thunderbird&query_type=is_exactly&range_unit=weeks&process_type=any&hang_type=any&date=2013-08-21+12%3A00%3A00&range_value=8

Comment 3

[Paul Pasca[Away. Please needinfo? Paul Oiegas [:pauloiegasSV]]]

There are no crash reports in the last 7/14/28 days in the crash signature [@ js::gc::ScanLinearString ], therefore closing this bug as Resolved: Works for me. Please reopen the bug if the crash still reproduces and provide more information.