1612865 - Crash in [@ js::TenuringTracer::moveElementsToTenured]

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect, P5)

Description

[Pascal Chevrel:pascalc]

This bug is for crash report bp-303fb237-ee19-4076-b95c-c5bff0200127.

Top 10 frames of crashing thread:

0 xul.dll js::TenuringTracer::moveElementsToTenured js/src/gc/Marking.cpp:3363
1 xul.dll js::TenuringTracer::moveToTenuredSlow js/src/gc/Marking.cpp:3271
2 xul.dll js::TenuringTracer::traverse<JSObject> js/src/gc/Marking.cpp:2958
3 xul.dll js::MapGCThingTyped<`lambda at z:/task_1580116988/build/src/js/src/gc/Marking.cpp:2985:43'> js/public/Value.h:1256
4 xul.dll js::TenuringTracer::traceObject js/src/gc/Marking.cpp:3163
5 xul.dll js::Nursery::doCollection js/src/gc/Nursery.cpp:1141
6 xul.dll js::Nursery::collect js/src/gc/Nursery.cpp:1004
7 xul.dll js::gc::GCRuntime::minorGC js/src/gc/GC.cpp:7397
8 xul.dll js::AllocateObject<js::CanGC> js/src/gc/Allocator.cpp:66
9 xul.dll static js::ArrayObject::createArray js/src/vm/ArrayObject-inl.h:89

Comment 1

[Gabriele Svelto [:gsvelto]]

This is a typical signature that we see on machines with faulty memory so unless it spikes it's probably just the users having flaky machines.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.

Comment 3

[BugBot (nomail) [:suhaib / :marco/ :calixte]]

Since the bug is closed, the stalled keyword is now meaningless.
For more information, please visit BugBot documentation.