Closed Bug 962063 Opened 10 years ago Closed 10 years ago

Crash on http://shopap.lenovo.com/in/en/laptops/

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
29 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 961969
Tracking Flags:
Tracking Status
firefox29 - ---

People

(Reporter: mayankleoboy1, Unassigned)

References

(
URL
)

Details

(Keywords: crash)

Crash Data

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 (Beta/Release)
Build ID: 20140120030202

Steps to reproduce:

1. create fresh profile
2. Go to http://shopap.lenovo.com/in/en/laptops/
3. While the page is loading scroll the page up and down


Actual results:

crash


Expected results:

no crash

Crash profiles :
https://crash-stats.mozilla.com/report/index/a99c6275-583b-4f22-82f9-eba822140121
https://crash-stats.mozilla.com/report/index/802b65c3-6f48-4891-b737-da37a2140121

and a different crash with this signature :
https://crash-stats.mozilla.com/report/index/d8175d54-c9d9-4b49-818f-59c242140121
tentatively marking this is Javascript category.
URL: http://shopap.lenovo.com/in/en/laptops/
Component: General → JavaScript Engine
bp-421fafe0-b816-440c-ad39-74e1b2140121
bp-4cf9897b-8e4c-4abd-b440-ddd652140121
Severity: normal → critical
Status: UNCONFIRMED → NEW
Crash Signature: [@ js::jit::DoGetPropFallback] [@ js::gc::AutoCopyFreeListToArenas::AutoCopyFreeListToArenas(JSRuntime*, js::ZoneSelector)] [@ js::GCMarker::processMarkStackTop(js::SliceBudget&)] [@ JS_NewObject(JSContext*, JSClass const*, JS::Handle<JSObject*>, JS::H…
Ever confirmed: true
Keywords: crash
Version: 23 Branch → 29 Branch
Good:
http://hg.mozilla.org/integration/mozilla-inbound/rev/357883f2205b
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 ID:20140116113208
Bad:
http://hg.mozilla.org/integration/mozilla-inbound/rev/d2eca1d56402
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 ID:20140116115207
Pushlog
http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=357883f2205b&tochange=d2eca1d56402
Regressed by Bug 916612
Blocks: 916612
tracking-firefox29: --- → ?
Thanks for bisecting this!  I verified that the patch in bug 961969 fixes this.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
Since this is a duplicate of Bug #961969 and is being addressed there I do not think we need to track this.
You need to log in before you can comment on or make changes to this bug.