Closed Bug 564572 Opened 14 years ago Closed 14 years ago

crash while typing in a form with a character counter [@js_DefineNativeProperty ]

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME
Tracking Status
blocking2.0 --- final+

People

(Reporter: kbrosnan, Unassigned)

References

Details

(Keywords: crash, regression, topcrash)

Crash Data

Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a5pre) Gecko/20100507 Minefield/3.7a5pre I was typing in a Newegg product review page that has a couple text boxes that have character counters. I had pasted into the textbox somewhat recently and I was doing something with the arrow keys, might have been selecting text via the keyboard. I don't know that this is reproducible. bp-4167c633-c9db-4401-97f3-d50d92100507 0 libmozjs.so js_DefineNativeProperty js/src/jsobj.h:326 1 libmozjs.so js_DefineProperty js/src/jsobj.cpp:4044 2 libxul.so DefinePropertyIfFound js/src/xpconnect/src/xpcwrappednativejsops.cpp:534 3 libxul.so XPC_WN_NoHelper_Resolve js/src/xpconnect/src/xpcwrappednativejsops.cpp:805 4 libmozjs.so js_LookupPropertyWithFlags js/src/jsobj.cpp:4354 5 libmozjs.so js_GetPropertyHelper js/src/jsobj.cpp:4713 6 libmozjs.so js_Interpret js/src/jsops.cpp:1479 7 libmozjs.so js_Invoke js/src/jsinterp.cpp:831 8 libmozjs.so array_extra js/src/jsarray.cpp:3111 9 libmozjs.so js_Interpret js/src/jsops.cpp:2199 10 libmozjs.so js_Invoke js/src/jsinterp.cpp:831 11 libxul.so nsXPCWrappedJSClass::CallMethod js/src/xpconnect/src/xpcwrappedjsclass.cpp:1696 12 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_linux.cpp:153 13 libxul.so libxul.so@0xe5572a
Recent crash reports: eb8bd15a-cd19-4974-a747-1db7e2100508 (build id: 20100508030622) e3f6b7bb-4318-421c-b0a1-855322100506 (build id: 20100506030635) 2de7cb42-98f4-4b8b-9957-c0c5d2100506 (build id: 20100506030635) All of those are with the OS X trunk builds: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.3a5pre) Gecko/2010#### Minefield/3.7a5pre (Platform -> All/All as original reporter was using Linux and I'm on OS X) For what it's worth, the first crash report ("eb8bd15a...") occurred while clicking the "[direct] message" link on someone's Twitter profile page, though I can't quite recall the triggers for the other two.
OS: Linux → All
Hardware: x86_64 → All
My SeaMonkey: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.3a5pre) Gecko/20100510 NOT Firefox/3.5.5 SeaMonkey/2.1a1pre ID:20100510003927 crashing just leaving it open for hour or so with the same signature.
http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&signature=js_DefineNativeProperty&version=Firefox%3A3.7a5pre shows Mac and Linux crashes spiking after 20100503. There was a tracemonkey merge on the 4th. The crash is among the trunk topcrashers currently.
Severity: normal → critical
So I've just updated my browser from some mid-April version, and hit this crash two times so far just in the last 5 hours.
blocking2.0: --- → ?
Keywords: regression, topcrash
bz, if you get it in a debugger, please holler on #jsapi. /be
I'm crashing in nightlies, sorry. :( I suppose I could attach a debugger to my nightly, though. No guarantees that it won't be all optimized away weirdly.
I'm also getting this nearly on a daily basis on the nightly that I run for my main browsing. If someone can teach me how to make OS X attach a debugger to a program which crashes instead of showing the report crash dialog (like how VC debugger kicks in on Windows), I'd be happy to help with debugging it when this happens again.
The simplest thing to do is probably to attach the debugger after starting the app and leave it attached... That said, the nightlies don't have debug symbols, last I checked, so you may not get much info out of it....
Mac nightlies have function symbols, at least, for easy sharking.
Right, but that won't give us more information than we already have from the breakpad stack, as far as I can see.
So there's a good chance this (and bug 566429) is a duplicate of bug 564344.
Blocks: 564344
No longer blocks: 564344
Depends on: 564344
blocking2.0: ? → final+
I checked and I still see this signature for the Beta6 crash reports.
seems to be fixed now - Results within 30 days of 11/04/2010 10:32:35, where the crash signature is exactly 'js_DefineNativeProperty', and the product is one of Firefox, and the version is one of Firefox:4.0b8pre and the crashing process was a any. No results were found.
Closing per comment 14.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
Crash Signature: [@js_DefineNativeProperty ]
You need to log in before you can comment on or make changes to this bug.