Seen while running Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0b7pre) Gecko/20100914 Firefox/4.0b7pre. Happens using Windows XP trunk as well. STR: 1. Load the site in the URL using a clean Minefield profile. 2. Minefield freezes, and I have to force quit On Mac, the site loads fine using Safari and Chrome, as well as FF 3.6.8. Using Flash Version: 10.1.82.76 on Mac as well as Windows XP.

It's running around in the JavaScript Bytecode Interpreter... A backtrace (gdb) backtrace #0 0x00007ffff66ca99f in js::Value::toObject (this=0x7fffe35fda90) at /home/jeff/src/firefox/mozilla-central/js/src/jsvalue.h:593 #1 0x00007ffff69665ca in js::mjit::ValueToObject (cx=0x7fffcc8bac00, vp=0x7fffe35fda90) at /home/jeff/src/firefox/mozilla-central/js/src/methodjit/StubCalls-inl.h:65 #2 0x00007ffff6971d27 in js::mjit::stubs::SetElem<0> (f=...) at /home/jeff/src/firefox/mozilla-central/js/src/methodjit/StubCalls.cpp:615 #3 0x00007fffdda0b77f in ?? () #4 0x00007ffff689aad5 in throwpoline_exit () at /home/jeff/src/firefox/mozilla-central/js/src/methodjit/MethodJIT.cpp:143

Some tests fail... $ python jstests.py -d -j 4 ../../../objdir-ff-debug/dist/bin/js [2864| 3| 166] 100% ===============================================>| 393.7s FIXES js1_8_5/regress/regress-555246-1.js REGRESSIONS ecma/Date/15.9.5.35-1.js js1_5/extensions/toLocaleFormat-01.js js1_5/Regress/regress-58116.js FAIL

Works with javascript disabled in Preferences

Disabling tracemonkey makes the problem disappear. about:config javascript.options.jit.content to false javascript.options.jit.chrome” to false

May be duplicate of a bug in tracemonkey

trace-test fails $ python trace-test.py /home/jeff/src/firefox/mozilla-central/objdir-ff-debug/dist/bin/js [ 843| 1| 844] 100% ===============================================>| 31.8s FAILURES: -j /home/jeff/src/firefox/mozilla-central/js/src/trace-test/tests/sunspider/check-date-format-tofte.js

Verified to be fixed by bug 597871.