Closed Bug 883589 Opened 11 years ago Closed 11 years ago

crash in js::analyze::ScriptAnalysis::analyzeBytecode

Categories

(Core :: JavaScript Engine, defect)

24 Branch
x86
Windows 7
defect
Not set
critical

Tracking

()

VERIFIED FIXED
Tracking Status
firefox23 --- unaffected
firefox24 --- verified

People

(Reporter: alice0775, Unassigned)

References

()

Details

(Keywords: crash, regression, reproducible)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-c8903aa3-7e81-4e64-94f9-c6c8d2130616 .
============================================================= 

Steps To Reproduce:
1. Open http://docs.sencha.com/extjs/4.2.1/#!/api/Ext.form.Basic


Actual Results:
Immediately Crashes


Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/18c1fd169792
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614031707
Crash:
http://hg.mozilla.org/integration/mozilla-inbound/rev/ce43d28276e4
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614045911
Pushlog
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=18c1fd169792&tochange=ce43d28276e4

Regressed by : Bug 678037

And It seemed to be fixed by
6c897b8852ab	Brian Hackett — Bug 883524 - Don't assume a non-lazy script when analyzing a 'new' script's properties.
Silly bug 865146.
Crash Signature: [@ js::analyze::ScriptAnalysis::analyzeBytecode(JSContext*)] → [@ js::analyze::ScriptAnalysis::analyzeBytecode(JSContext*) ]
no crash in 16-Jun Nightly.
http://hg.mozilla.org/mozilla-central/rev/36da3cb92193
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130616 Firefox/24.0 ID:20130616031139

fixed by Bug 883524
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Reproduced Nightly 2013-06-15.
Verified fixed FF 24b8, 26.0a1 (2013-09-02) Win 7
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.