Closed Bug 826035 Opened 13 years ago Closed 13 years ago

crash in JS_GetScriptedGlobal

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
19 Branch
Platform:
All
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 806206
Tracking Flags:
Tracking Status
firefox19 - ---
firefox20 - ---

People

(Reporter: marcia, Unassigned)

References

(
URL
)

Details

(Keywords: crash, regression, reproducible)

Crash Data

This bug was filed from the Socorro interface and is report bp-5ba8d216-33d0-41da-9520-11de72130102 . ============================================================= Seen while looking at crash stats. Small volume crash first spotted on Aurora but happens on Nightly as well. 100% reproducible with the site in the URL field. Link to the crashes: https://crash-stats.mozilla.com/report/list?signature=JS_GetScriptedGlobal%28JSContext*%29 Frame Module Signature Source 0 XUL JS_GetScriptedGlobal Heap.h:989 1 XUL nsGlobalWindow::CallerInnerWindow nsGlobalWindow.cpp:6011 2 XUL nsGlobalWindow::PostMessageMoz nsGlobalWindow.cpp:6343 3 XUL nsGlobalWindow::PostMessageMoz nsGlobalWindow.cpp:6331 4 XUL NS_InvokeByIndex_P xptcinvoke_x86_64_unix.cpp:162 5 XUL XPCWrappedNative::CallMethod XPCWrappedNative.cpp:3100 6 XUL XPC_WN_CallMethod XPCWrappedNativeJSOps.cpp:1488 7 @0x10d26fb02 8 XUL EnterIon Ion.cpp:1472 9 XUL js::RunScript jsinterp.cpp:303 10 XUL js::InvokeKernel jsinterp.cpp:381 11 XUL js::Invoke jsinterp.h:109 12 XUL js::ion::InvokeFunction VMFunctions.cpp:79 13 @0x10d2e7e27 14 libnspr4.dylib PR_SetThreadPrivate prtpd.c:139 15 XUL EnterIon Ion.cpp:1472 16 XUL js::RunScript jsinterp.cpp:303 17 XUL js::InvokeKernel jsinterp.cpp:381 18 XUL js::Invoke jsinterp.h:109 19 XUL JS_CallFunctionValue jsapi.cpp:5770 20 XUL nsXPCWrappedJSClass::CallMethod XPCWrappedJSClass.cpp:1432 21 XUL nsXPCWrappedJS::CallMethod XPCWrappedJS.cpp:580 22 XUL PrepareAndDispatch xptcstubs_x86_64_darwin.cpp:121 23 XUL SharedStub 24 XUL js_AddRoot dist/include/js/HashTable.h:128 25 firefox firefox@0x2 26 XUL nsEventTargetChainItem::HandleEvent nsEventListenerManager.h:152 27 XUL nsEventTargetChainItem::HandleEventTargetChain nsEventDispatcher.cpp:313 28 XUL nsEventDispatcher::Dispatch nsEventDispatcher.cpp:629 29 XUL PostMessageEvent::Run nsGlobalWindow.cpp:6321 30 XUL nsThread::ProcessNextEvent nsThread.cpp:627 31 XUL NS_ProcessPendingEvents_P nsThreadUtils.cpp:187 32 XUL nsBaseAppShell::NativeEventCallback nsBaseAppShell.cpp:97 33 XUL nsAppShell::ProcessGeckoEvents nsAppShell.mm:387 34 CoreFoundation CoreFoundation@0x12d20 35 CoreFoundation CoreFoundation@0x12644 36 CoreFoundation CoreFoundation@0x359e4 37 CarbonCore CarbonCore@0x1b875 38 XUL nsThreadManager::GetIsMainThread nsThreadManager.cpp:272 39 XUL NS_IsMainThread_P nsThreadUtils.cpp:136 40 XUL nsXPConnect::GetXPConnect nsXPConnect.cpp:140 41 XUL XPCCallContext::~XPCCallContext xpcprivate.h:666 42 XUL XPC_WN_Helper_NewResolve XPCWrappedNativeJSOps.cpp:1125 43 @0x27ed747 44 XUL xpc::Unwrap XPCWrapper.cpp:95 45 XUL XPCWrappedNative::GetWrappedNativeOfJSObject Util.h:219 46 @0xfffa80010a30055f 47 libnspr4.dylib PR_GetCurrentThread ptthread.c:583 48 XUL nsThreadManager::GetIsMainThread nsThreadManager.cpp:272 49 XUL NS_IsMainThread_P nsThreadUtils.cpp:136 50 XUL nsXPConnect::GetXPConnect nsXPConnect.cpp:140 51 XUL XPCCallContext::~XPCCallContext xpcprivate.h:666 52 XUL XPC_WN_CallMethod XPCWrappedNativeJSOps.cpp:1489 53 XUL JaegerTrampolineReturn 54 libnspr4.dylib PR_GetCurrentThread ptthread.c:583 55 XUL js::mjit::EnterMethodJIT MethodJIT.cpp:1044 56 XUL js::mjit::JaegerShot MethodJIT.cpp:1101 57 @0x7fff5fbfc56f 58 CoreFoundation CoreFoundation@0x12b42 59 libsystem_c.dylib libsystem_c.dylib@0x19885 60 libsystem_c.dylib libsystem_c.dylib@0x19885 61 libmozglue.dylib arena_dalloc jemalloc.c:1699 62 libsystem_c.dylib libsystem_c.dylib@0x2d8f7 63 libsystem_c.dylib libsystem_c.dylib@0x19885 64 CoreFoundation CoreFoundation@0x18df09 65 CoreFoundation CoreFoundation@0x356c0 66 CoreFoundation CoreFoundation@0xfdc7 67 CoreFoundation CoreFoundation@0x2b0c8 68 CoreFoundation CoreFoundation@0x25f4 69 libsystem_c.dylib libsystem_c.dylib@0x19db3 70 CoreFoundation CoreFoundation@0x35468 71 XUL js::RunScript jsinterp.cpp:327 72 CarbonCore CarbonCore@0x1c091 73 HIToolbox HIToolbox@0x8d52d 74 HIToolbox HIToolbox@0x5e4d6 75 libsystem_c.dylib libsystem_c.dylib@0x2b88 76 libsystem_c.dylib libsystem_c.dylib@0x3c4f2 77 HIToolbox HIToolbox@0x662d6 78 CoreFoundation CoreFoundation@0x495b2 79 HIToolbox HIToolbox@0x66109 80 libsystem_c.dylib libsystem_c.dylib@0x19db3 81 CoreFoundation CoreFoundation@0x5a57f 82 CoreFoundation CoreFoundation@0x5a426 83 CoreFoundation CoreFoundation@0x352d1 84 HIToolbox HIToolbox@0x5feb3 85 HIToolbox HIToolbox@0x5fb93 86 HIToolbox HIToolbox@0x5fae2 87 AppKit AppKit@0x155562 88 XUL nsWindowSH::GlobalResolve dist/include/nsTSubstring.h:85 89 CoreFoundation CoreFoundation@0x356c0 90 CoreFoundation CoreFoundation@0xfdc7 91 CoreFoundation CoreFoundation@0x2b0c8 92 CoreFoundation CoreFoundation@0x25f4 93 CoreFoundation CoreFoundation@0x25f4 94 libsystem_c.dylib libsystem_c.dylib@0x19db3 95 AppKit AppKit@0x154e21 96 CoreFoundation CoreFoundation@0x35468
(In reply to Marcia Knous [:marcia] from comment #0) > This bug was filed from the Socorro interface and is > report bp-5ba8d216-33d0-41da-9520-11de72130102 . > ============================================================= > > Seen while looking at crash stats. Small volume crash first spotted on > Aurora but happens on Nightly as well. 100% reproducible with the site in > the URL field. Link to the crashes: > https://crash-stats.mozilla.com/report/ > list?signature=JS_GetScriptedGlobal%28JSContext*%29 Can we get a regression window here to help guide assigning this bug?
Keywords: qawanted, regressionwindow-wanted
QA Contact: mozillamarcia.knous
I crash with FF19+ on this page too but with the signature [@ JSObject::global() ] which is bug 806206. So this current bug is likely a dupe of bug 806206. In addition, I found the same regression range: good=2012-10-11 bad=2012-10-12 http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=99898ec9976a&tochange=1301a72b1c39
Crash Signature: [@ JS_GetScriptedGlobal(JSContext*)] → [@ JS_GetScriptedGlobal(JSContext*)] [@ JSObject::global() ]
tracking-firefox20: --- → ?
Keywords: regression
Version: 17 Branch → 19 Branch
Tentatively marking as a dupe of bug 826035.
Status: NEW → RESOLVED
Closed: 13 years ago
tracking-firefox19: ? → -
tracking-firefox20: ? → -
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.