Open Bug 757004 Opened 8 years ago Updated 6 years ago

"Assertion failure: !cx->isExceptionPending()" with nearScriptStackLimit

Categories

(Core :: JavaScript Engine, defect)

13 Branch
defect
Not set
normal

Tracking

()

People

(Reporter: pauly, Unassigned)

Details

(Keywords: assertion, regression, testcase, Whiteboard: [js:p1][js:bumped:2][js:ni])

STR:
1. Open https://bugzilla.mozilla.org/attachment.cgi?id=580173
2. Click the button

Actual result:
Assertion failure: !cx->isExceptionPending(), at e:\builds\moz2_slave\m-beta-w32-dbg\build\js\src\jscntxtinlines.h:317

https://crash-stats.mozilla.com/report/pending/6a95f8f1-1b4c-483b-b125-999632120521
I'll come back with a regression range.
(this is the test case from bug 708825)
Assignee: nobody → general
Component: XPCOM → JavaScript Engine
QA Contact: xpcom → general
Last good debug nightly: 2012-01-18
First bad debug nightly: 2012-01-19
http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=2012-01-18&enddate=2012-01-19

This is not reproducible on the latest nightly. It was fixed:
Last bad debug nightly: 2012-05-04
First good debug nightly: 2012-05-05
http://hg.mozilla.org/mozilla-central/pushloghtml?startdate=2012-05-04&enddate=2012-05-05

But this is reproducible on the latest beta debug build (http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012-05-18-mozilla-beta-debug/) and on the latest aurora debug build (http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012-05-21-mozilla-aurora-debug/).
Assignee: general → nobody
Component: JavaScript Engine → XPCOM
QA Contact: general → xpcom
Assignee: nobody → general
Component: XPCOM → JavaScript Engine
QA Contact: xpcom → general
Whiteboard: [js:investigate][js:p1:fx15]
There isn't much JS in that range. I'm thinking it might be a regression from bug 718134. Interestingly, CPG is in the fix range.
Whiteboard: [js:investigate][js:p1:fx15] → [js:p1:fx16]
Summary: Assertion failure: !cx->isExceptionPending() → "Assertion failure: !cx->isExceptionPending()" with nearScriptStackLimit
Whiteboard: [js:p1:fx16] → [js:p1:fx17][js:bumped:1]
Whiteboard: [js:p1:fx17][js:bumped:1] → [js:p2:fx18][js:bumped:2]
Whiteboard: [js:p2:fx18][js:bumped:2] → [js:p1:fx18][js:bumped:2]
Whiteboard: [js:p1:fx18][js:bumped:2] → [js:p1][js:bumped:2][js:ni]
Assignee: general → nobody
You need to log in before you can comment on or make changes to this bug.