Closed
Bug 564572
Opened 14 years ago
Closed 14 years ago
crash while typing in a form with a character counter [@js_DefineNativeProperty ]
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
WORKSFORME
Tracking | Status | |
---|---|---|
blocking2.0 | --- | final+ |
People
(Reporter: kbrosnan, Unassigned)
References
Details
(Keywords: crash, regression, topcrash)
Crash Data
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.3a5pre) Gecko/20100507 Minefield/3.7a5pre
I was typing in a Newegg product review page that has a couple text boxes that have character counters. I had pasted into the textbox somewhat recently and I was doing something with the arrow keys, might have been selecting text via the keyboard. I don't know that this is reproducible.
bp-4167c633-c9db-4401-97f3-d50d92100507
0 libmozjs.so js_DefineNativeProperty js/src/jsobj.h:326
1 libmozjs.so js_DefineProperty js/src/jsobj.cpp:4044
2 libxul.so DefinePropertyIfFound js/src/xpconnect/src/xpcwrappednativejsops.cpp:534
3 libxul.so XPC_WN_NoHelper_Resolve js/src/xpconnect/src/xpcwrappednativejsops.cpp:805
4 libmozjs.so js_LookupPropertyWithFlags js/src/jsobj.cpp:4354
5 libmozjs.so js_GetPropertyHelper js/src/jsobj.cpp:4713
6 libmozjs.so js_Interpret js/src/jsops.cpp:1479
7 libmozjs.so js_Invoke js/src/jsinterp.cpp:831
8 libmozjs.so array_extra js/src/jsarray.cpp:3111
9 libmozjs.so js_Interpret js/src/jsops.cpp:2199
10 libmozjs.so js_Invoke js/src/jsinterp.cpp:831
11 libxul.so nsXPCWrappedJSClass::CallMethod js/src/xpconnect/src/xpcwrappedjsclass.cpp:1696
12 libxul.so PrepareAndDispatch xpcom/reflect/xptcall/src/md/unix/xptcstubs_x86_64_linux.cpp:153
13 libxul.so libxul.so@0xe5572a
Comment 1•14 years ago
|
||
Recent crash reports:
eb8bd15a-cd19-4974-a747-1db7e2100508 (build id: 20100508030622)
e3f6b7bb-4318-421c-b0a1-855322100506 (build id: 20100506030635)
2de7cb42-98f4-4b8b-9957-c0c5d2100506 (build id: 20100506030635)
All of those are with the OS X trunk builds:
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.3a5pre)
Gecko/2010#### Minefield/3.7a5pre
(Platform -> All/All as original reporter was using Linux and I'm on OS X)
For what it's worth, the first crash report ("eb8bd15a...") occurred while
clicking the "[direct] message" link on someone's Twitter profile page, though
I can't quite recall the triggers for the other two.
OS: Linux → All
Hardware: x86_64 → All
Comment 2•14 years ago
|
||
My SeaMonkey: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.3a5pre) Gecko/20100510 NOT Firefox/3.5.5 SeaMonkey/2.1a1pre ID:20100510003927
crashing just leaving it open for hour or so with the same signature.
Comment 4•14 years ago
|
||
http://crash-stats.mozilla.com/report/list?range_value=2&range_unit=weeks&signature=js_DefineNativeProperty&version=Firefox%3A3.7a5pre shows Mac and Linux crashes spiking after 20100503. There was a tracemonkey merge on the 4th. The crash is among the trunk topcrashers currently.
Severity: normal → critical
Comment 5•14 years ago
|
||
So I've just updated my browser from some mid-April version, and hit this crash two times so far just in the last 5 hours.
blocking2.0: --- → ?
Keywords: regression,
topcrash
Comment 6•14 years ago
|
||
bz, if you get it in a debugger, please holler on #jsapi.
/be
Comment 7•14 years ago
|
||
I'm crashing in nightlies, sorry. :( I suppose I could attach a debugger to my nightly, though. No guarantees that it won't be all optimized away weirdly.
Comment 8•14 years ago
|
||
I'm also getting this nearly on a daily basis on the nightly that I run for my main browsing. If someone can teach me how to make OS X attach a debugger to a program which crashes instead of showing the report crash dialog (like how VC debugger kicks in on Windows), I'd be happy to help with debugging it when this happens again.
Comment 9•14 years ago
|
||
The simplest thing to do is probably to attach the debugger after starting the app and leave it attached... That said, the nightlies don't have debug symbols, last I checked, so you may not get much info out of it....
Mac nightlies have function symbols, at least, for easy sharking.
Comment 11•14 years ago
|
||
Right, but that won't give us more information than we already have from the breakpad stack, as far as I can see.
Comment 12•14 years ago
|
||
So there's a good chance this (and bug 566429) is a duplicate of bug 564344.
Blocks: 564344
Updated•14 years ago
|
Updated•14 years ago
|
blocking2.0: ? → final+
Comment 13•14 years ago
|
||
I checked and I still see this signature for the Beta6 crash reports.
Comment 14•14 years ago
|
||
seems to be fixed now - Results within 30 days of 11/04/2010 10:32:35, where the crash signature is exactly 'js_DefineNativeProperty', and the product is one of Firefox, and the version is one of Firefox:4.0b8pre and the crashing process was a any.
No results were found.
Comment 15•14 years ago
|
||
Closing per comment 14.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
Updated•13 years ago
|
Crash Signature: [@js_DefineNativeProperty ]
You need to log in
before you can comment on or make changes to this bug.
Description
•