939259 - crash in js::Invoke

Status: RESOLVED INCOMPLETE

(Core :: JavaScript Engine, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

This bug was filed from the Socorro interface and is 
report bp-1711f4f2-022b-4c90-929c-99e942131111.
=============================================================
Frame 	Module 	Signature 	Source
0 	libxul.so 	js::Invoke 	js/src/vm/Interpreter.cpp
1 	libxul.so 	JS_CallFunctionValue(JSContext*, JSObject*, JS::Value, unsigned int, JS::Value*, JS::Value*) 	js/src/jsapi.cpp
2 	libxul.so 	mozilla::dom::workers::WorkerPrivate::RunExpiredTimeouts(JSContext*) 	dom/workers/WorkerPrivate.cpp
3 	libxul.so 	TimerRunnable::WorkerRun 	dom/workers/WorkerPrivate.cpp
4 	libxul.so 	mozilla::dom::workers::WorkerRunnable::Run() 	dom/workers/WorkerPrivate.cpp
5 	libxul.so 	mozilla::dom::workers::WorkerPrivate::DoRunLoop(JSContext*) 	dom/workers/WorkerPrivate.cpp
6 	libxul.so 	WorkerThreadRunnable::Run 	dom/workers/RuntimeService.cpp
7 	libxul.so 	nsThread::ProcessNextEvent(bool, bool*) 	xpcom/threads/nsThread.cpp
8 	libxul.so 	NS_ProcessNextEvent(nsIThread*, bool) 	xpcom/glue/nsThreadUtils.cpp
9 	libxul.so 	nsThread::ThreadFunc(void*) 	xpcom/threads/nsThread.cpp
10 	libnss3.so 	_pt_root 	nsprpub/pr/src/pthreads/ptthread.c
11 	libc.so 	__thread_entry 	bionic/libc/bionic/pthread.c
12 	libc.so 	pthread_create 	bionic/libc/bionic/pthread.c
13 		@0x444e31d6

More Reports: https://crash-stats.mozilla.com/report/list?product=B2G&signature=js%3A%3AInvoke

Note:
1. need to find STR

Comment 1

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Per bsmedberg, I cc'ed bent, khuey.  

Probably a stupid question : where do we use workers?

Comment 2

[Andrew McCreight [:mccr8]]

b2g crash