This bug was filed from the Socorro interface and is report bp-5dc2725e-9fa9-404e-a3ac-29f192140327. ============================================================= This is not a recent crash, but the majority is coming from Firefox 29 (beta 1 and 2) installations, on Windows 7 and XP. Looking at the list of URLs where this could be happening point to facebook.com and yahoo.com, and a few comments say they were composing or reading mail (yahoo) and one person was playing a game on Facebook. 0 mozjs.dll InitFromBailout js/src/jit/BaselineBailouts.cpp 1 mozjs.dll js::jit::BailoutIonToBaseline(JSContext *,js::jit::JitActivation *,js::jit::IonBailoutIterator &,bool,js::jit::BaselineBailoutInfo * *,js::jit::ExceptionBailoutInfo const *) js/src/jit/BaselineBailouts.cpp 2 mozjs.dll js::jit::Bailout(js::jit::BailoutStack *,js::jit::BaselineBailoutInfo * *) js/src/jit/Bailouts.cpp 3 @0x37b37553

This signature was basically at 8 crashes in 28 Beta and now at ~200 crashes / M ADI (or ~600 crashes daily) in 29 Beta, so I think we should call this bug specifically for that 29 regression. Naveed, who from the JS team can look into this JIT crash regression?

This looks a lot like bug 976536. Let's see how that bug affects crash-stats here.

This is now a top crash, at #5, for Fx29.

This is #4, and rising, on Aurora (Fx30). With the #1 crash fixed there, this crash will be the next actionable item prior to uplift to beta. Total Count URL 761 https://www.facebook.com/ 102 http://www.farsnews.com/ 43 https://www.facebook.com/?ref=tn_tnmn 40 http://farsnews.com/ 31 http://www.t-online.de/sport/ 27 http://www.t-online.de/nachrichten/ I guess we see how bug 976536 goes, as they are able to reproduce that crash at farsnews.com

I'm going to mark this fixed. Please file a new bug if bug 976536 didn't fix this (completely).

No crashes from yesterdays builds on the nightly channels. We'll have to wait another day for data about Fx29