QA/Fennec/fennec-related-jscript-crashers

The purpose of this page is to keep track of all bugs that are crashers that maybe related to JS.

The following bugs have been marked in the whiteboard with "fennec-related-jscript-crashers":

Blocking-Fennec

• bug 615993 - Fennec crash [@ js::mjit::JaegerShot ]
• bug 629797 - crash [@ js::mjit::ic::PurgeMICs]
• bug 626361 - Fennec crash [@ EqualityCompiler::update]
• bug 623188 - Crash [@js::mjit::ic::GetGlobalName]
• bug 608021 - Crashes based in nsFrameMessageManager::ReceiveMessage [@ js::Interpret] [@ js::TraceRecorder::record_NativeCallComplete] [@ js_LookupPropertyWithFlags]
• bug 623166 - Fennec crash [@ js::AbortRecordingImpl ]
• bug 617297 (JS exception?) - Fennec 4.0b3pre Crash Report [@ nsXPConnect::GetPrincipal] [@ nsScriptSecurityManager::doGetObjectPrincipal] [@ XPCWrappedNative::GetObjectPrincipal]

Nominated Blocking-Fennec

• bug 625381 - Fennec crash during launch if a badly formed JS dump is in the scrollBy method of the binding
• bug 630033 - Fennec 4.0b4pre Crash Report [@js::ctypes::ConvertToJS ]

Here are the unreported JavaScript Crashers:

• Fennec 4.0b3 Crash Report [@ js::NewBuiltinClassInstance ]
  • maybe related to:
    • bug 605830 crash [@ js_NewGCObject(JSContext*, js::gc::FinalizeKind) ]
• Fennec 4.0b4pre Crash Report [@ js_GetArgsValue ]
• Fennec 4.0b4pre Crash Report [@ CallCompiler::update ]
  • possible related bugs:
    • bug 612102 - crash [@ js::mjit::StubCompiler::fixCrossJumps(unsigned char*, unsigned int, unsigned int) ]
    • bug 629078 - crash Crash Report [@ js::mjit::Compiler::iterMore() ]
• Fennec 4.0b4pre Crash Report [@ @0x0 | JS_DHashClearEntryStub ]
• Fennec 4.0b4pre Crash Report [@ JSObject::getGlobal ]
• Fennec 4.0b4pre Crash Report [@ libdvm.so@0x42520 ]