1712099 - Crash in [@ js::frontend::StencilXDR::codeSharedData<T>]

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect, P3)

Description

[Sean Feng [:sefeng211]]

Crash report: https://crash-stats.mozilla.org/report/index/be873756-323f-4ecb-b099-bef050210518

MOZ_CRASH Reason: MOZ_DIAGNOSTIC_ASSERT(mIsValid) (Invalid checked integer (division by zero or integer overflow))

Top 10 frames of crashing thread:

0 xul.dll static js::frontend::StencilXDR::codeSharedData<js::XDR_DECODE> js/src/frontend/StencilXdr.cpp:255
1 xul.dll js::XDRScript<js::XDR_DECODE> js/src/vm/JSScript.cpp:1214
2 xul.dll js::XDRInterpretedFunction<js::XDR_DECODE> js/src/vm/JSFunction.cpp:653
3 xul.dll js::XDRScript<js::XDR_DECODE> js/src/vm/JSScript.cpp:1212
4 xul.dll js::XDRState<js::XDR_DECODE>::codeScript js/src/vm/Xdr.cpp:307
5 xul.dll js::MultiScriptsDecodeTask::parse js/src/vm/HelperThreads.cpp:892
6 xul.dll js::ParseTask::runHelperThreadTask js/src/vm/HelperThreads.cpp:618
7 xul.dll static js::HelperThread::ThreadMain js/src/vm/HelperThreads.cpp:2429
8 xul.dll static js::detail::ThreadTrampoline<void  js/src/threading/Thread.h:209
9 ucrtbase.dll thread_start<unsigned int > 

Comment 1

[Matthew Gaudet (he/him) [:mgaudet]]

Seeing the same crash, but seems peculiar. Looking at the last 6 months:

• Only two build IDs are involved: 20210517212600 and 20210504152106.
• The crashes from 20210517212600 are all Windows crashes most of which happened within 10 seconds of each other
• The crashes from 20210504152106 are all android crashes, all with identical install time.

Doesn't seem high severity here, so dropping to S3.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Closing because no crashes reported for 12 weeks.