Closed Bug 826786 Opened 11 years ago Closed 11 years ago

Crash at Jamendo's search field interaction (with suggestions) [@ js::mjit::FrameState::pushCopyOf(js::mjit::FrameEntry*) ], [@ js::mjit::FrameEntry::setConstant(JS::Value const&) ]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: Aleksej, Unassigned)

References

(
URL
)

Details

(Keywords: crash, steps-wanted, Whiteboard: [testday-20130104])

Crash Data

2013-01-04-03-08-23-mozilla-central-firefox-20.0a1.en-US.linux-x86_64

bp-56267e60-7c9b-4dee-9d76-8d7ca2130104
bp-f08fd1ba-0722-40d9-ae05-5007c2130104
bp-283f40b1-f874-47c5-bd0e-fdad32130104
bp-3de0ed11-b3a6-4db7-83eb-419f72130104

No additional enabled extensions necessary.

Crash happened when interacting with Jamendo’s search field, particularly when typing and backspacing a character like “r” in it.

I couldn’t find the exact steps to reproduce it, and cannot reproduce now.

Per-window Private Browsing may be related, although I remember the crash also happening in a different window?
(in the one case of typing and removing “r”, it wasn’t always only “r”, but also with “t”)
When you enter a single-character search string, it filters the suggestions for the previous string.

The string I've been entering consistently is “ceil”, maybe “cei” or “ceili”.  It crashed at “ceil” at least once: bp-66aff1ad-dc8f-4210-8186-476382130104
Summary: Crash at Jamendo's search interaction [@ js::mjit::FrameState::pushCopyOf(js::mjit::FrameEntry*) ], [@ js::mjit::FrameEntry::setConstant(JS::Value const&) ] → Crash at Jamendo's search field interaction (with suggestions) [@ js::mjit::FrameState::pushCopyOf(js::mjit::FrameEntry*) ], [@ js::mjit::FrameEntry::setConstant(JS::Value const&) ]
Build ID: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20130104 Firefox/20.0
Windows 7 64bit.

No crashes for me.
Keywords: steps-wanted
Crash Signature: [@ js::mjit::FrameState::pushCopyOf(js::mjit::FrameEntry*)] [@ js::mjit::FrameEntry::setConstant(JS::Value const&)]
Keywords: crash
Assignee: nobody → general
Component: General → JavaScript Engine
JM is gone.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.