e4x/XMLList/regress-373072.js browser crashes opt/debug on mac tracemonkey at least.

Not specific to that test, but it does crash after finishing e4x/XMLList Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_PROTECTION_FAILURE at address: 0x00000000 0x002c80d9 in GetAndCacheLocalTime (cx=0x1099200, obj=0x15064d40, vp=0x0, dp=0xbfffca80) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1254 1254 jsdouble result = *JSVAL_TO_DOUBLE(*vp); (gdb) bt #0 0x002c80d9 in GetAndCacheLocalTime (cx=0x1099200, obj=0x15064d40, vp=0x0, dp=0xbfffca80) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1254 #1 0x002c8a26 in date_getTimezoneOffset (cx=0x1099200, argc=0, vp=0x14d0300) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsdate.cpp:1508 #2 0x00318fd0 in js_Interpret (cx=0x1099200) at jsops.cpp:2271 #3 0x0032bb72 in js_Execute (cx=0x1099200, chain=0x150a1aa0, script=0x2225ec00, down=0x0, flags=0, result=0x0) at jsinterp.cpp:1616 #4 0x002a0dc3 in JS_EvaluateUCScriptForPrincipals (cx=0x1099200, obj=0x150a1aa0, principals=0x2074c424, chars=0x17dd0008, length=15638, filename=0x1ad4ec28 "file:///work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/tests/ecma/shell.js", lineno=1, rval=0x0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/jsapi.cpp:5070 #5 0x12339086 in nsJSContext::EvaluateString (this=0x836ff0, aScript=@0x1ad336a4, aScopeObject=0x150a1aa0, aPrincipal=0x2074c420, aURL=0x1ad4ec28 "file:///work/mozilla/builds/1.9.3-tracemonkey/mozilla/js/src/tests/ecma/shell.js", aLineNo=1, aVersion=150, aRetValue=0x0, aIsUndefined=0xbfffd384) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/dom/base/nsJSEnvironment.cpp:1683 #6 0x120ec9fe in nsScriptLoader::EvaluateScript (this=0x1914ffa0, aRequest=0x1ad33690, aScript=@0x1ad336a4) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:690 #7 0x120ecca4 in nsScriptLoader::ProcessRequest (this=0x1914ffa0, aRequest=0x1ad33690) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:604 #8 0x120ecd30 in nsScriptLoader::ProcessPendingRequests (this=0x1914ffa0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:744 #9 0x120ed040 in nsScriptLoader::OnStreamComplete (this=0x1914ffa0, aLoader=0x1ad33630, aContext=0x1ad33690, aStatus=0, aStringLen=15638, aString=0x17dcc000 "/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */\n/* ***** BEGIN LICENSE BLOCK *****\n * Version: MPL 1.1/GPL 2.0/LGPL 2.1\n *\n * The contents of this file are subject to t"...) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/content/base/src/nsScriptLoader.cpp:931 #10 0x13bd975b in nsStreamLoader::OnStopRequest (this=0x1ad33630, request=0x1ad4ed90, ctxt=0x1ad33690, aStatus=0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsStreamLoader.cpp:127 #11 0x13b90ce9 in nsBaseChannel::OnStopRequest (this=0x1ad4ed60, request=0x1ad4ece0, ctxt=0x0, status=0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsBaseChannel.cpp:680 #12 0x13ba4002 in nsInputStreamPump::OnStateStop (this=0x1ad4ece0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsInputStreamPump.cpp:576 #13 0x13ba4122 in nsInputStreamPump::OnInputStreamReady (this=0x1ad4ece0, stream=0x1ad4f16c) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/netwerk/base/src/nsInputStreamPump.cpp:401 #14 0x005836d6 in nsInputStreamReadyEvent::Run (this=0x1ad4f380) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/xpcom/io/nsStreamUtils.cpp:112 #15 0x005b6eea in nsThread::ProcessNextEvent (this=0x81a220, mayWait=0, result=0xbfffd724) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/xpcom/threads/nsThread.cpp:527 #16 0x0053bdae in NS_ProcessPendingEvents_P (thread=0x81a220, timeout=20) at nsThreadUtils.cpp:180 #17 0x14b02d35 in nsBaseAppShell::NativeEventCallback (this=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:121 #18 0x14ab2972 in nsAppShell::ProcessGeckoEvents (aInfo=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/cocoa/nsAppShell.mm:417 #19 0x96a413c5 in CFRunLoopRunSpecific () #20 0x96a41aa8 in CFRunLoopRunInMode () #21 0x93ec32ac in RunCurrentEventLoopInMode () #22 0x93ec30c5 in ReceiveNextEventCommon () #23 0x93ec2f39 in BlockUntilNextEventMatchingListInMode () #24 0x941dc6d5 in _DPSNextEvent () #25 0x941dbf88 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] () #26 0x941d4f9f in -[NSApplication run] () #27 0x14ab04fc in nsAppShell::Run (this=0x1538b1c0) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/widget/src/cocoa/nsAppShell.mm:770 #28 0x147d3bd6 in nsAppStartup::Run (this=0x84c920) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/toolkit/components/startup/src/nsAppStartup.cpp:182 #29 0x0007751c in XRE_main (argc=7, argv=0xbfffec88, aAppData=0x80eb10) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/toolkit/xre/nsAppRunner.cpp:3471 #30 0x00002863 in main (argc=7, argv=0xbfffec88) at /work/mozilla/builds/1.9.3-tracemonkey/mozilla/browser/app/nsBrowserApp.cpp:156

This crash can not be disabled (easily) through disabling a single test.

all platforms.

fixed by backout http://hg.mozilla.org/tracemonkey/rev/2909091fb254 tracemonkey only issue.