991833
|
|
Recent spike in crashes with js::jit::DoGetPropFallback
|
Core
|
JavaScript Engine: J
|
nobody
|
NEW
|
---
|
2022-12-14
|
991746
|
|
crash in js::Nursery::MinorGCCallback(JSTracer*, void**, JSGCTraceKind)
|
Core
|
JavaScript: GC
|
nobody
|
RESO
|
WORK
|
2016-10-14
|
991752
|
|
crash in GetObjectAllocKindForCopy
|
Core
|
JavaScript: GC
|
nobody
|
RESO
|
FIXE
|
2016-10-14
|
991847
|
|
crash in js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct)
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
WORK
|
2019-06-23
|
992306
|
|
crash in JSObject::getGeneric(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSObject*>, JS::Handle<jsid>, JS::MutableHandle<JS::Value>)
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2014-11-19
|
991845
|
|
crash in nsTArray_base<nsTArrayInfallibleAllocator, nsTArray_CopyWithMemutils>::IncrementLength(unsigned int) | `anonymous namespace''::WorkerJSRuntime::WorkerJSRuntime(JSRuntime*, mozilla::dom::workers::WorkerPrivate*)
|
Core
|
JavaScript Engine
|
continuation
|
VERI
|
FIXE
|
2014-08-11
|
991755
|
|
crash in js::Nursery::moveToTenured(js::gc::MinorCollectionTracer*, JSObject*)
|
Core
|
JavaScript: GC
|
jdemooij
|
VERI
|
FIXE
|
2015-09-08
|