1. http://www.crowngreenbowler.co.uk/epages/crowngreenbowler.sf/?ObjectPath=/Shops/crowngreenbowler/Products/Chip 2. Crash [@ js::HashSet<js::ReadBarriered<js::types::TypeObject>, js::types::TypeObjectEntry, js::SystemAllocPolicy>::lookupForAdd(js::types::TypeObjectEntry::Lookup const&) ] bp-1e8e983a-92ea-4856-89c1-4c7a32131110 Appears to be 32bit Windows only A saved version didn't crash, so no test case for now. Bisecting m-c opt gives: Found regression between 20131001030204-20131002030201 Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=6b92cb377496&tochange=e3c84e9f2490 http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2013/10/2013-10-01-03-02-04-mozilla-central/firefox-27.0a1.en-US.win32.installer.exe http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2013/10/2013-10-02-03-02-01-mozilla-central/firefox-27.0a1.en-US.win32.installer.exe I'll bisect inbound next. My windows vms are so slow, I'm reluctant to try to bisect builds. Debug builds crashed at: js::GetObjectClass js::IsProxy js::IsWrapper JSObject::is<js::WrapperObject> js::EmulatesUndefined and js::jit::ICTypeMonitor_Fallback::addMonitorStubForValue

(In reply to Bob Clary [:bc:] from comment #0) > I'll bisect inbound next. Any regression range from inbound?

Last good revision: 42de34151ea9 First bad revision: 3bbcea535e8f Pushlog: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=42de34151ea9&tochange=3bbcea535e8f But this was fixed on trunk. Found fix between 20131220030203-20131221030204 Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=c9ea463d36c3&tochange=7bc1fb6a21ae http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2013/12/2013-12-20-03-02-03-mozilla-central/firefox-29.0a1.en-US.win32.installer.exe http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2013/12/2013-12-21-03-02-04-mozilla-central/firefox-29.0a1.en-US.win32.installer.exe Found fix between 20140102004005-20140103004002 Pushlog: http://hg.mozilla.org/releases/mozilla-aurora/pushloghtml?fromchange=61f553e5db49&tochange=d9226a660d52 http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2014/01/2014-01-02-00-40-05-mozilla-aurora/firefox-28.0a2.en-US.win32.installer.exe http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2014/01/2014-01-03-00-40-02-mozilla-aurora/firefox-28.0a2.en-US.win32.installer.exe This doesn't reproduce on beta either.