This bug was filed from the Socorro interface and is report bp-2833acb1-ca4f-4cf1-859d-50ee40180831. ============================================================= This appeared in two different installations in the Android nightly 20180830111743. Top 10 frames of crashing thread: 0 libmozglue.so MOZ_CrashPrintf mfbt/Assertions.cpp:68 1 libxul.so JS_InitializePropertiesFromCompatibleNativeObject js/src/vm/JSContext-inl.h:52 2 libxul.so mozilla::dom::HTMLDocument_Binding::Wrap dom/bindings/HTMLDocumentBinding.cpp:2149 3 libxul.so JSObject* mozilla::dom::HTMLDocument_Binding::Wrap<nsHTMLDocument> dist/include/mozilla/dom/HTMLDocumentBinding.h:40 4 libxul.so nsINode::WrapObject dom/base/nsINode.cpp:2806 5 libxul.so mozilla::dom::XPCOMObjectToJsval dom/bindings/BindingUtils.cpp:1120 6 libxul.so mozilla::dom::WrapNativeHelper<nsIConstraintValidation, false>::Wrap dom/bindings/BindingUtils.h:1613 7 libxul.so JSObject* mozilla::dom::FindAssociatedGlobal<mozilla::dom::ParentObject> dom/bindings/BindingUtils.h:1677 8 libxul.so mozilla::dom::HTMLInputElement_Binding::Wrap dom/bindings/HTMLInputElementBinding.cpp:6197 9 libxul.so JSObject* mozilla::dom::HTMLInputElement_Binding::Wrap<mozilla::dom::HTMLInputElement> dist/include/mozilla/dom/HTMLInputElementBinding.h:117 =============================================================

This is the same stack as bug 1481844.