Build: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101020 Firefox/4.0b8pre It is a new crash signature that was introduced by 4.0b7pre/20101001 build. It is #137 top crasher in 4.0b8pre for the last week. Signature js_NewGCShortString(JSContext*) UUID e1eedc60-e805-446f-a1d7-e5df82101020 Time 2010-10-20 07:50:55.212534 Uptime 6415 Last Crash 589482 seconds (6.8 days) before submission Install Age 51480 seconds (14.3 hours) since version was first installed. Product Firefox Version 4.0b8pre Build ID 20101019041714 Branch 2.0 OS Windows NT OS Version 6.1.7600 CPU x86 CPU Info GenuineIntel family 6 model 23 stepping 10 Crash Reason EXCEPTION_ACCESS_VIOLATION_READ Crash Address 0x40 App Notes AdapterVendorID: 1002, AdapterDeviceID: 9553 Frame Module Signature [Expand] Source 0 mozjs.dll js_NewGCShortString js/src/jsgcinlines.h:154 1 mozjs.dll js_ConcatStrings js/src/jsstr.cpp:290 2 mozjs.dll js::Interpret js/src/jsinterp.cpp:3590 3 mozjs.dll js::RunScript js/src/jsinterp.cpp:638 4 mozjs.dll js::Invoke js/src/jsinterp.cpp:747 5 mozjs.dll js::ExternalInvoke js/src/jsinterp.cpp:871 6 mozjs.dll JS_CallFunctionValue js/src/jsapi.cpp:4961 7 xul.dll nsXPCWrappedJSClass::CallMethod js/src/xpconnect/src/xpcwrappedjsclass.cpp:1694 8 xul.dll nsXPCWrappedJS::CallMethod js/src/xpconnect/src/xpcwrappedjs.cpp:571 9 xul.dll PrepareAndDispatch xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:114 10 xul.dll SharedStub xpcom/reflect/xptcall/src/md/win32/xptcstubs.cpp:141 11 xul.dll nsDownloadManager::NotifyListenersOnProgressChange toolkit/components/downloads/src/nsDownloadManager.cpp:1786 The regression range is: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=5a2012482a63&tochange=e3dcde25c792 More reports at: http://crash-stats.mozilla.com/report/list?product=Firefox&query_search=signature&query_type=exact&query=&range_value=4&range_unit=weeks&hang_type=any&process_type=any&plugin_field=&plugin_query_type=&plugin_query=&do_query=1&admin=&signature=js_NewGCShortString%28JSContext*%29

The stack is unclear but this looks like an invalid context. Brian, this might be related to the other crash you are looking at.

This does look possibly-related. It looks like cx->compartment is NULL for a lot of these, corrupt in some, whereas bug 601725 has the same pattern for cx->thread.

About 6 of these on 8.0 since it was released. Not high volume but still valid.

There have been no crashes for the last four weeks after 12.0.