947703 - crash in EnterBaseline at startup

Status: VERIFIED FIXED

(Core :: JavaScript Engine: JIT, defect)

Description

[Alice0775 White]

This bug was filed from the Socorro interface and is 
report bp-18b4e1cf-18f6-4a77-9fc7-9fc572131208.
=============================================================

Crash on 2013-12-08 build, but not on 2013-12-07 build.

Comment 1

[Alice0775 White]

Steps To Reproduce:
1. Install https://addons.mozilla.org/en-US/firefox/addon/multiple-tab-handler/ and restart
2. Update 2013-Dec-08 Nightly build

Regression window(m-i)
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/8dcaf0cd8b89
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131207103358
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/5bb192fc539e
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131207110501
Pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=8dcaf0cd8b89&tochange=5bb192fc539e

Regressed by:
5bb192fc539e	Brian Hackett — Bug 944930 - Remove block index from aliasedvar ops, use a binary search to find the block chain for a given pc, r=luke.

Comment 2

[Kosuke Kaizuka]

Same problem with Win x86_64.

20131207 nightly (Win x86, x86_64): OK
20131208 nightly (Win x86, x86_64): crash

Win x86: ca0c58d6-3cc3-4638-b862-4a34b2131208
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131208030204
Winx86_64: could not get crash report
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131208030204

Disabling only multiple-tab-handler resolves this problem.

Comment 3

[Robert Kaiser]

This is rising fast in crash stats - Brian, can you take a look?

Comment 4

[Brian Hackett [Laid off!]]

Alice, this may have been fixed by bug 947661 (rev cb0546838451), can you still reproduce?

Comment 5

[Alice0775 White]

(In reply to Brian Hackett (:bhackett) from comment #4)
> Alice, this may have been fixed by bug 947661 (rev cb0546838451), can you
> still reproduce?

Yes, fixed.

I cannot reproduce the crash in latest m-c build.
http://hg.mozilla.org/mozilla-central/rev/9f12a9fab080
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131209040201

Crash;
http://hg.mozilla.org/integration/mozilla-inbound/rev/f749a52bd4e6
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131208160700
Fixed:
http://hg.mozilla.org/integration/mozilla-inbound/rev/cb0546838451
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0 ID:20131208164601
Fixed pushlog:
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=f749a52bd4e6&tochange=cb0546838451

Comment 6

[u279076]

Verified fixed based on comment 5.

Comment 7

[User Dderss]

I could not add my crash report to super secret and restricted bug https://bugzilla.mozilla.org/show_bug.cgi?id=957006, so I have to put it here, sorry:
https://crash-stats.mozilla.com/report/index/1b63e31d-932f-452b-93bd-33e6e2140505