Closed Bug 883589 Opened 12 years ago Closed 12 years ago

crash in js::analyze::ScriptAnalysis::analyzeBytecode

Categories

(Core :: JavaScript Engine, defect)

24 Branch
x86
Windows 7
defect
Not set
critical

Tracking

()

VERIFIED FIXED
Tracking Status
firefox23 --- unaffected
firefox24 --- verified

People

(Reporter: alice0775, Unassigned)

References

()

Details

(Keywords: crash, regression, reproducible)

Crash Data

This bug was filed from the Socorro interface and is report bp-c8903aa3-7e81-4e64-94f9-c6c8d2130616 . ============================================================= Steps To Reproduce: 1. Open http://docs.sencha.com/extjs/4.2.1/#!/api/Ext.form.Basic Actual Results: Immediately Crashes Regression window(m-i) Good: http://hg.mozilla.org/integration/mozilla-inbound/rev/18c1fd169792 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614031707 Crash: http://hg.mozilla.org/integration/mozilla-inbound/rev/ce43d28276e4 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130614 Firefox/24.0 ID:20130614045911 Pushlog http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=18c1fd169792&tochange=ce43d28276e4 Regressed by : Bug 678037 And It seemed to be fixed by 6c897b8852ab Brian Hackett — Bug 883524 - Don't assume a non-lazy script when analyzing a 'new' script's properties.
Silly bug 865146.
Crash Signature: [@ js::analyze::ScriptAnalysis::analyzeBytecode(JSContext*)] → [@ js::analyze::ScriptAnalysis::analyzeBytecode(JSContext*) ]
no crash in 16-Jun Nightly. http://hg.mozilla.org/mozilla-central/rev/36da3cb92193 Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20130616 Firefox/24.0 ID:20130616031139 fixed by Bug 883524
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Reproduced Nightly 2013-06-15. Verified fixed FF 24b8, 26.0a1 (2013-09-02) Win 7
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.