Created attachment 661908 [details] stack The testcase in bug 719114 comment 49 crashes Nightly 2012-09-17 (changeset 3f0587ce1774) at: bp-4cb2a08a-bfa0-4e32-b0fe-8cdf62120916 bp-ea14df72-d8a9-47e6-a36e-c49112120916 bp-975f5602-eb82-4177-809d-8b9352120916 bp-8c44f300-81f9-4993-8105-4254f2120916 bp-8bc931f6-e12a-4758-ae1f-0cd012120916 Testcase is also available at http://www.straitstimes.com/sites/straitstimes.com/files/ST_20120914_SWIPHONE14_3298937.pdf Keep dragging in the testcase in a new tab, close the tab, drag it into the same tab, etc. to reproduce. Jesse has a stack from a debug build. Locking s-s because bug 789882 is s-s and has a similar stack.
Bill's apparently out this week, so I'll give this a go. Marking critical due to it being scary looking.
Assignee: nobody → continuation
Loading that PDF generates all sorts of crashiness for me on OSX in a local debug build. The stacks are all over the place.
Sounds like a possible dupe of bug 790464, due to the PDJ.JS stuff, and lots of weird stacks.
Created attachment 662259 [details] ASAN log, IM enabled :johns is trying this in ASAN. It crashes ASAN, with this log. He's trying it with IM disabled now to see if that affects anything.
It looked okay in ASAN with Ionmonkey disabled, so I'm going to reassign to dvander for triage. Please assign back to me if this is incorrect scapegoating.
Assignee: continuation → dvander
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 792226
Is it possible to make a testcase for this that will run in our regression testsuite?
Whiteboard: [sg:dupe 792226]
You need to log in before you can comment on or make changes to this bug.