1353688 - Crash in js::jit::CodeGeneratorShared::encode

Status: RESOLVED INCOMPLETE

(Core :: JavaScript Engine, defect, P3)

Description

[baffclan]

This bug was filed from the Socorro interface and is 
report bp-764d3415-cfb0-45ad-8e04-3b9392170405.
=============================================================

Crashing Thread (9)
Frame 	Module 	Signature 	Source
0 	xul.dll 	js::jit::CodeGeneratorShared::encode(js::jit::LSnapshot*) 	js/src/jit/shared/CodeGenerator-shared.cpp:614
1 	xul.dll 	js::jit::CodeGeneratorShared::markOsiPoint(js::jit::LOsiPoint*) 	js/src/jit/shared/CodeGenerator-shared.cpp:1122
2 	xul.dll 	js::jit::CodeGenerator::visitOsiPoint(js::jit::LOsiPoint*) 	js/src/jit/CodeGenerator.cpp:2733
3 	xul.dll 	js::jit::CodeGenerator::generateBody() 	js/src/jit/CodeGenerator.cpp:5378
4 	xul.dll 	js::jit::CodeGenerator::generate() 	js/src/jit/CodeGenerator.cpp:9626
5 	xul.dll 	js::jit::GenerateCode(js::jit::MIRGenerator*, js::jit::LIRGraph*) 	js/src/jit/Ion.cpp:2042
6 	xul.dll 	js::jit::CompileBackEnd(js::jit::MIRGenerator*) 	js/src/jit/Ion.cpp:2064
7 	xul.dll 	js::HelperThread::handleIonWorkload(js::AutoLockHelperThreadState&) 	js/src/vm/HelperThreads.cpp:1554
8 	xul.dll 	js::HelperThread::threadLoop() 	js/src/vm/HelperThreads.cpp:1926
9 	xul.dll 	js::detail::ThreadTrampoline<void (&)(void*), js::HelperThread*>::Start(void*) 	js/src/threading/Thread.h:227
10 	ucrtbase.dll 	o__realloc_base 	
11 	kernel32.dll 	BaseThreadInitThunk 	
12 	ntdll.dll 	RtlUserThreadStart 	



Application Basics: 
Name: Firefox
Version: 54.0a2
Build ID: 20170405004003 	
Update Channel: aurora
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:54.0) Gecko/20100101 Firefox/54.0

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 15 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.