Closed Bug 496639 Opened 15 years ago Closed 15 years ago

Crash on yahoo mail [@ js_NewFlatClosure]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: u88484, Unassigned)

References

Details

(Keywords: crash, topcrash, Whiteboard: [fixed by bug 496245])

Crash Data

Crash on yahoo mail [@ js_NewFlatClosure] Not sure the steps yet since I'm filing this on behalf of a few posts on mozillazine.org and I can't actually reproduce it.
I was the one who reported this on the forums. Some more notes: -It happens in safe mode -It happens with JIT Content enabled or disabled -We're talking the new Yahoo Mail -I'm using XP but I don't know if it happens on other OSes
I crash quite easily on the Mac, so changing to all. Here is my breakpad: http://crash-stats.mozilla.com/report/index/46b4644a-3b54-45b8-a397-2216b2090605, which shows js_GetUpvar at the top unlike the report in Comment 1.
OS: Windows Vista → All
Hardware: x86 → All
Assignee: nobody → general
Component: General → JavaScript Engine
Product: Firefox → Core
QA Contact: general → general
ok, found a range: http://hg.mozilla.org/tracemonkey/pushloghtml?fromchange=e576024cd255&tochange=a16ed38ff63a => caused by bug 494269 maybe this is a dupe to/related to already filed bug 496251 ?!
Blocks: 494269
Or a dup of bug 496270? /be
Whiteboard: DUPEME
within the last few days this is trunk's topcrash (on windows) now: http://preview.tinyurl.com/moysnq for stats.
Keywords: topcrash
Given the location of the crash and that it happens with or without content JIT enabled, this is most likely a dup of 496245. Should we just monitor the crashes after that patch lands?
ok, just tested again with TM hourly builds to verify comment 8: this got fixed in the range http://hg.mozilla.org/tracemonkey/pushloghtml?fromchange=1cfe7ecbb88f&tochange=594138cd96e3 => so indeed fixed by bug 496245. since that landed on trunk too, this bug is FIXED.
Status: NEW → RESOLVED
Closed: 15 years ago
Depends on: 496245
Resolution: --- → FIXED
Whiteboard: DUPEME → [fixed by bug 496245]
Crash Signature: [@ js_NewFlatClosure]
You need to log in before you can comment on or make changes to this bug.