1535347 - Crash in [@ js::gc::EdgeNeedsSweep<T>]

Status: REOPENED

(Core :: JavaScript: GC, defect, P5)

Description

[Pascal Chevrel:pascalc]

This bug is for crash report bp-d2497193-18f3-4b70-b558-dc67c0190314.

Top 10 frames of crashing thread:

0 xul.dll bool js::gc::EdgeNeedsSweep<JSObject*> js/src/gc/Marking.cpp:3403
1 xul.dll bool `anonymous namespace'::TypeCompilerConstraint< js/src/vm/TypeInference.cpp:1279
2 xul.dll js::ConstraintTypeSet::sweep js/src/vm/TypeInference.cpp:4539
3 xul.dll js::ObjectGroup::sweep js/src/vm/TypeInference.cpp:4662
4 xul.dll js::gc::GCRuntime::sweepTypeInformation js/src/gc/GC.cpp:5909
5 xul.dll js::gc::IncrementalProgress sweepaction::SweepActionSequence<js::gc::GCRuntime*, js::FreeOp*, js::SliceBudget&, JS::Zone*>::run js/src/gc/GC.cpp:6296
6 xul.dll js::gc::IncrementalProgress sweepaction::SweepActionForEach<js::gc::SweepGroupZonesIter, JSRuntime*, js::gc::GCRuntime*, js::FreeOp*, js::SliceBudget&>::run js/src/gc/GC.cpp:6327
7 xul.dll js::gc::IncrementalProgress sweepaction::SweepActionSequence<js::gc::GCRuntime*, js::FreeOp*, js::SliceBudget&>::run js/src/gc/GC.cpp:6296
8 xul.dll js::gc::IncrementalProgress sweepaction::SweepActionRepeatFor<js::gc::SweepGroupsIter, JSRuntime*, js::gc::GCRuntime*, js::FreeOp*, js::SliceBudget&>::run js/src/gc/GC.cpp:6356
9 xul.dll js::gc::GCRuntime::performSweepActions js/src/gc/GC.cpp:6528

Comment 1

[Hani Yacoub, Desktop QA]

Closing this as resolved:worksforme since there were no crashes in the last 6 months for this signature.

Comment 2

[Andrew McCreight [:mccr8]]

There have been recent crashes with this signature.

Comment 3

[BugBot [:suhaib / :marco/ :calixte]]

Since the crash volume is low (less than 5 per week), the severity is downgraded to S3. Feel free to change it back if you think the bug is still critical.

For more information, please visit auto_nag documentation.