Closed Bug 768726 Opened 12 years ago Closed 12 years ago

Firefox crashes on long exception stacks with Firebug and "Track Throw/Catch"

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 768446

People

(Reporter: simon.lindholm10, Unassigned)

Details

(Keywords: crash, reproducible)

Crash Data

User Agent: Mozilla/5.0 (X11; Linux i686; rv:16.0) Gecko/16.0 Firefox/16.0a1
Build ID: 20120623040202

Steps to reproduce:

Install Firebug 1.10b1, set the "Track Throw/Catch" option (which runs random stack traversal etc. on JSD onThrow) from the Script panel's menu, and disable Script, Net and Cookie panels. Keep the Console panel enabled, so that JSD is on.

Open Firebug on a page containing
<script>
function tower(f, n) (n ? tower : f) (f, n-1);
tower(function() { error.here; }, 1000)
</script>
and reload.


Actual results:

Firefox crashes.
https://crash-stats.mozilla.com/report/index/bp-939b5094-e02e-47db-bb8d-b1c302120627
https://crash-stats.mozilla.com/report/index/bp-28625649-5827-4d51-bbc1-d2fda2120627 
https://crash-stats.mozilla.com/report/index/bp-63fdecad-eac8-4455-a6e6-f1bd62120627 

With 39 instead of 1000, it never crashes; with 40 it consistently crashes.
Stacks look like bug 746076 but I can't reproduce that.
It might be a dupe of bug 768446 although their stack traces differ.
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: [@ CrashIfInvalidSlot ]
Ever confirmed: true
Keywords: crash, reproducible
Version: 16 Branch → Trunk
Seems so - I can't reproduce now.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.