crash in js::frontend::CompileScript

NEW
Unassigned

Status

()

Core
JavaScript Engine
--
critical
5 years ago
2 years ago

People

(Reporter: Scoobidiver (away), Unassigned)

Tracking

({crash, regression})

21 Branch
x86
Windows XP
crash, regression
Points:
---

Firefox Tracking Flags

(firefox20 unaffected, firefox21 affected, firefox22 affected, firefox23 affected, firefox24 affected)

Details

(crash signature)

(Reporter)

Description

5 years ago
It's currently #42 top browser crasher in 21.0a2. It first showed up in 21.0a1/20130214 but is discontinuous across builds.

Signature 	js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) More Reports Search
UUID	8d7dff71-108a-4cd9-a5cb-7ed172130309
Date Processed	2013-03-09 06:38:51
Uptime	156
Last Crash	2.6 minutes before submission
Install Age	12.1 hours since version was first installed.
Install Time	2013-03-08 18:30:14
Product	Firefox
Version	21.0a2
Build ID	20130308042013
Release Channel	aurora
OS	Windows NT
OS Version	6.1.7601 Service Pack 1
Build Architecture	x86
Build Architecture Info	AuthenticAMD family 16 model 6 stepping 2
Crash Reason	EXCEPTION_ACCESS_VIOLATION_READ
Crash Address	0xffffffffffffffff
App Notes 	
AdapterVendorID: 0x1002, AdapterDeviceID: 0x6779, AdapterSubsysID: 00000000, AdapterDriverVersion: 9.12.0.0
D2D? D2D+ DWrite? DWrite+ D3D10 Layers? D3D10 Layers+ 
Processor Notes 	sp-processor01.phx1.mozilla.com_6524:2008
EMCheckCompatibility	True
Adapter Vendor ID	0x1002
Adapter Device ID	0x6779
Total Virtual Memory	4294836224
Available Virtual Memory	3599745024
System Memory Use Percentage	51
Available Page File	21578665984
Available Physical Memory	1040416768

Frame 	Module 	Signature 	Source
0 	mozjs.dll 	js::frontend::CompileScript 	js/src/frontend/BytecodeCompiler.cpp:191
1 	xul.dll 	nsCOMPtr_base::assign_from_qi 	obj-firefox/xpcom/build/nsCOMPtr.cpp:58
2 	xul.dll 	nsJSContext::EvaluateString 	dom/base/nsJSEnvironment.cpp:1290
3 	xul.dll 	nsScriptLoader::EvaluateScript 	content/base/src/nsScriptLoader.cpp:847
4 	xul.dll 	nsScriptLoader::ProcessRequest 	content/base/src/nsScriptLoader.cpp:737
5 	xul.dll 	nsScriptLoader::ProcessPendingRequests 	content/base/src/nsScriptLoader.cpp:897
6 	xul.dll 	nsScriptLoader::OnStreamComplete 	content/base/src/nsScriptLoader.cpp:1105
7 	xul.dll 	nsStreamLoader::OnStopRequest 	netwerk/base/src/nsStreamLoader.cpp:101
8 	xul.dll 	nsMultipartProxyListener::OnStopRequest 	content/base/src/nsSyncLoadService.cpp:109
9 	xul.dll 	mozilla::net::nsHttpChannel::OnStopRequest 	netwerk/protocol/http/nsHttpChannel.cpp:5060
10 	nspr4.dll 	nspr4.dll@0x9150 	
11 	xul.dll 	nsInputStreamPump::OnStateStop 	netwerk/base/src/nsInputStreamPump.cpp:553
12 	xul.dll 	nsInputStreamPump::OnInputStreamReady 	netwerk/base/src/nsInputStreamPump.cpp:375
13 	xul.dll 	nsInputStreamReadyEvent::Run 	xpcom/io/nsStreamUtils.cpp:82
14 	xul.dll 	nsThread::ProcessNextEvent 	xpcom/threads/nsThread.cpp:627
15 	xul.dll 	NS_ProcessNextEvent_P 	obj-firefox/xpcom/build/nsThreadUtils.cpp:238
16 	xul.dll 	mozilla::ipc::MessagePump::Run 	ipc/glue/MessagePump.cpp:82
17 	xul.dll 	MessageLoop::RunHandler 	ipc/chromium/src/base/message_loop.cc:208
18 	xul.dll 	MessageLoop::Run 	ipc/chromium/src/base/message_loop.cc:182
19 	xul.dll 	nsBaseAppShell::Run 	widget/xpwidgets/nsBaseAppShell.cpp:163
20 	xul.dll 	nsAppShell::Run 	widget/windows/nsAppShell.cpp:154
21 	xul.dll 	XREMain::XRE_mainRun 	toolkit/xre/nsAppRunner.cpp:3871
22 	xul.dll 	XREMain::XRE_main 	toolkit/xre/nsAppRunner.cpp:3938
23 	xul.dll 	XRE_main 	toolkit/xre/nsAppRunner.cpp:4141

More reports at:
https://crash-stats.mozilla.com/report/list?signature=js%3A%3Afrontend%3A%3ACompileScript%28JSContext*%2C+JS%3A%3AHandle%3CJSObject*%3E%2C+js%3A%3AAbstractFramePtr%2C+JS%3A%3ACompileOptions+const%26%2C+wchar_t+const*%2C+unsigned+int%2C+JSString*%2C+unsigned+int%2C+js%3A%3ASourceCompressionToken*%29
(Reporter)

Updated

5 years ago
Crash Signature: [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*)] → [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) ]

Comment 1

5 years ago
Some URLs:

2 	http://www.facebook.com/leticia.prates.796?ref=tn_tnmn
1 	http://www.autovit.ro/mercedes-benz-c-220-C28273435.html
1 	https://www.facebook.com/
1 	http://www.facebook.com/sara.francaandrade?ref=ts&fref=ts
1 	http://www.free-tv-video-online.me/player/putlocker.php?id=5282418A88CB0170
1 	http://www.facebook.com/rayanne.rissari
1 	http://www.vidxden.com/embed-l8yk8wqgv90c.html
1 	https://www.facebook.com/login.php?login_attempt=1
1 	http://www.facebook.com/jessica.morgado.568?ref=ts&fref=ts
1 	http://www.free-tv-video-online.me/player/nowvideo.php?id=01e9e045e4a9c

And more, including adult content...
Keywords: needURLs
(Reporter)

Comment 2

4 years ago
More reports at:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=js%3A%3Afrontend%3A%3ACompileScript%28JSContext*%2C+JS%3A%3AHandle%3CJSObject*%3E%2C+JS%3A%3AHandle%3CJSScript*%3E%2C+JS%3A%3ACompileOptions+const%26%2C+wchar_t+const*%2C+unsigned+int%2C+JSString*%2C+unsigned+int%2C+js%3A%3ASourceCompressionToken*%29
Crash Signature: [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) ] → [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) ] [@ js::frontend::CompileScript(JSContext*, JS:&hellip;
status-firefox22: unaffected → affected
status-firefox23: --- → affected
status-firefox24: --- → affected
(Assignee)

Updated

3 years ago
Assignee: general → nobody

Updated

2 years ago
Crash Signature: [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) ] [@ js::frontend::CompileScript(JSContext*, JS:&hellip; → [@ js::frontend::CompileScript(JSContext*, JS::Handle<JSObject*>, js::AbstractFramePtr, JS::CompileOptions const&, wchar_t const*, unsigned int, JSString*, unsigned int, js::SourceCompressionToken*) ] [@ js::frontend::CompileScript(JSContext*, JS:&hellip;
You need to log in before you can comment on or make changes to this bug.