Backtrace : http://pastebin.mozilla.org/1679892 STR: - Open the scratchpad in chrome mode (devtools.chrome.enable to true, Environment to Chrome in the scratchpad), and enable the gcli (devtools.toolbar.enabled to true) ; - Paste the following in it: http://pastebin.mozilla.org/1679894 ; - Open the gcli using ctrl+shift+v ; - Type "reload page 4s". Expected: - The browsers does not crash. Actual: - The page reload once, and the browser crashes. An odd looking pointer is being dereferenced, apparently : (gdb) p reinterpret_cast<const shadow::Object*>(obj)->shape->base $4 = (js::shadow::BaseShape *) 0xa5a5a5a500000001
Oh, and I get that in the console just before the crash : 55048000[7f280213a480]: ###!!! ASSERTION: function object has parent of unknown class!: 'Error', file /home/paul/workspace/mozilla-middle/js/xpconnect/src/XPCWrappedNative.cpp, line 1798 ###!!! ASSERTION: function object has parent of unknown class!: 'Error', file /home/paul/workspace/mozilla-middle/js/xpconnect/src/XPCWrappedNative.cpp, line 1798
Severity: normal → critical
Crash Signature: [@ js::GetObjectClass]
Paul, the pastebins seem to have disappeared. Can you upload those as bug attachments instead?
You need to log in before you can comment on or make changes to this bug.