802529 - crash in js::detail::HashTableEntry with javascript.options.methodjit.chrome=false and javascript.options.methodjit.content=false

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Makoto Kato [:m_kato] (PTO until May 6)]

When I turn off methodjit on the latest nightly with SPS Profiler, frequency crash by the following stack 

This bug was filed from the Socorro interface and is 
report bp-27d59028-3df8-4089-9a7b-989792121017 .
============================================================= 
0 	mozjs.dll 	js::detail::HashTableEntry<js::ScriptSource* const>::isFree 	obj-firefox/dist/include/js/HashTable.h:52
1 	mozjs.dll 	js::detail::HashTable<js::HashMapEntry<js::ScriptSource*,JSStableString*>,js::Ha 	obj-firefox/dist/include/js/HashTable.h:440
2 	mozjs.dll 	js::detail::HashTable<js::HashMapEntry<JSScript*,js::SPSProfiler::JMScriptInfo*> 	obj-firefox/dist/include/js/HashTable.h:725
3 	mozjs.dll 	js::SPSProfiler::ipToPC 	js/src/vm/SPSProfiler.cpp:226
4 	mozjs.dll 	js::ProfilingGetPC 	js/src/jsfriendapi.cpp:921
5 	xul.dll 	addProfileEntry 	tools/profiler/TableTicker.cpp:696
6 	xul.dll 	TableTicker::doBacktrace 	tools/profiler/TableTicker.cpp:811
7 	xul.dll 	TableTicker::Tick 	tools/profiler/TableTicker.cpp:934
8 	xul.dll 	SamplerThread::SampleContext 	tools/profiler/platform-win32.cc:116
9 	xul.dll 	SamplerThread::Run 	tools/profiler/platform-win32.cc:76
10 	xul.dll 	ThreadEntry 	tools/profiler/platform-win32.cc:163
11 	msvcr100.dll 	_callthreadstartex 	f:\dd\vctools\crt_bld\self_x86\crt\src\threadex.c:314
12 	msvcr100.dll 	_threadstartex 	f:\dd\vctools\crt_bld\self_x86\crt\src\threadex.c:292
13 	kernel32.dll 	BaseThreadInitThunk 	
14 	ntdll.dll 	__RtlUserThreadStart 	
15 	ntdll.dll 	_RtlUserThreadStart

Comment 1

[Makoto Kato [:m_kato] (PTO until May 6)]

Attachment: fix

Comment 2

[Luke Wagner [:luke]]

Comment on attachment 672651 [details] [diff] [review]
fix

Thanks!

Comment 3

[Makoto Kato [:m_kato] (PTO until May 6)]

https://hg.mozilla.org/integration/mozilla-inbound/rev/445aca56acf6

Comment 4

[Ed Morley [:emorley]]

https://hg.mozilla.org/mozilla-central/rev/445aca56acf6