Closed Bug 1411191 Opened 8 years ago Closed 2 years ago

Crash in js::TenuringTracer::traverse<T>

Categories

(Core :: JavaScript: GC, defect, P3)

Product:
Core
Component:
JavaScript: GC
Platform:
x86
Windows 10
Type:
defect

Tracking

()

Status:
RESOLVED INCOMPLETE
Tracking Flags:
Tracking Status
firefox58 --- affected

People

(Reporter: jonco, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, sec-high, testcase-wanted, Whiteboard: [sec-triage-backlog][#jsapi:crashes-retriage])

Crash Data

+++ This bug was initially created as a clone of Bug #1358073 +++ This bug was filed from the Socorro interface and is report bp-171e9a25-2ff4-4330-8fd6-1b55f0170419. ============================================================= This has been getting ~500 crashes a day for a long time.
status-firefox58: --- → affected
Priority: -- → P1
-> P3 because not immediately actionable
Priority: P1 → P3
Hi Jon: I have assigned these security bugs to you to reassign them to appropriate developers in your team to investigate and fix them. Thanks! Wennie
Assignee: nobody → jcoppeard
By any chance, has anything changed in 3 months that would bring a fresh perspective to figure out this bug?
Flags: needinfo?(jcoppeard)
Sadly not. Unassigning myself as there's nothing immediately actionable here.
Assignee: jcoppeard → nobody
Flags: needinfo?(jcoppeard)
Whiteboard: [sec-triage-backlog]
Assigning unowned critical/high security bugs to triage owner. Please find an appropriate assignee for this bug.
Assignee: nobody → jcoppeard
Stalled. General signature for GC problems. Nothing specifically actionable from just this signature.
Assignee: jcoppeard → nobody
Keywords: stalled
Whiteboard: [sec-triage-backlog] → [sec-triage-backlog][#jsapi:crashes-retriage]
Severity: critical → S2

Infrequent GC crashes such as this are not a high impact issue.

Severity: S2 → S3

The severity field for this bug is set to S3. However, the bug is flagged with the sec-high keyword.
:willyelm, could you consider increasing the severity of this security bug?

For more information, please visit BugBot documentation.

Flags: needinfo?(wmedina)

I don't think leaving these ancient GC corruption bugs open is helping anything.

Status: NEW → RESOLVED
Closed: 2 years ago
Flags: needinfo?(wmedina)
Resolution: --- → INCOMPLETE

Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit BugBot documentation.

Keywords: stalled
Group: javascript-core-security
You need to log in before you can comment on or make changes to this bug.