927081 - crash in js::gc::IsAboutToBeFinalized<js::Shape>

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[u279076]

This bug was filed from the Socorro interface and is 
report bp-002335dc-2702-4386-823c-c22522131015.
=============================================================
0 	mozjs.dll 	js::gc::IsAboutToBeFinalized<js::Shape> 	js/src/gc/Marking.cpp
1 	mozjs.dll 	JSCompartment::sweepCrossCompartmentWrappers() 	js/src/jscompartment.cpp
2 	mozjs.dll 	PRMJ_Now() 	js/src/prmjtime.cpp
3 	mozjs.dll 	BeginSweepingZoneGroup 	js/src/jsgc.cpp
4 	mozjs.dll 	SweepPhase 	js/src/jsgc.cpp
5 	mozjs.dll 	IncrementalCollectSlice 	js/src/jsgc.cpp
6 	mozjs.dll 	GCCycle 	js/src/jsgc.cpp
7 	mozjs.dll 	js::GCSlice(JSRuntime *,js::JSGCInvocationKind,JS::gcreason::Reason,__int64) 	js/src/jsgc.cpp

More reports:
https://crash-stats.mozilla.com/report/list?product=Firefox&signature=js%3A%3Agc%3A%3AIsAboutToBeFinalized%3Cjs%3A%3AShape%3E

This crash appeared relatively non-existent until October 12, 2013 and is only showing up in large volume in Firefox 25.0b7. It's currently at #199 in Firefox 25 Beta.

Nothing stands out to be in the pushlog:
https://hg.mozilla.org/releases/mozilla-beta/pushloghtml?fromchange=373f0e83dc36&tochange=8b2c180a7b5d

Since these are happening on Windows only is it possible this is a manifestation of the intermittent PGO issue?

Comment 1

[u279076]

Alex, I'm need-infoing you to put this on your radar for Firefox 25. I'll continue to monitor it over the coming days.

Comment 2

[Alex Keybl [:akeybl]]

Thanks, let me know if this rises at all. Might be a one-off, as you suggest

Comment 3

[u279076]

I'm not seeing any instances of this signature for Firefox 25.0b8 or 25.0b9. Calling this WORKSFORME.