Closed Bug 752321 Opened 14 years ago Closed 14 years ago

crash in js::StackFrame::global

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
15 Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 752250

People

(Reporter: ttaubert, Unassigned)

Details

(Keywords: crash, regression, Whiteboard: [js:t])

Crash Data

This bug was filed from the Socorro interface and is report bp-e0372947-64be-44e9-a5c6-e74a22120505 . =============================================================
It first appeared in 15.0a1/20120504122939. The regression range is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=2db9df42823d&tochange=9ebf3dc839c5 It's probably related to incremental GC and bug 752098.
Keywords: regression
Version: Trunk → 15 Branch
Tim, do you have any STR? Steve, your unmarkGray stuff is in the regression range, and unmarkGray is on the stack. Could you check to see if this is a regression from that work?
Whiteboard: [js:p1:fx16][js:investigate][js:dm]
(In reply to David Mandelin from comment #2) > Tim, do you have any STR? No, didn't hit it again since I disabled IGC. Happened after CPG landed and they don't seem to like each other so far.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Whiteboard: [js:p1:fx16][js:investigate][js:dm] → [js:t]
You need to log in before you can comment on or make changes to this bug.