[tbb-bugs] #20381 [Applications/Tor Browser]: Tor Browser nightly bundles crash on Linux 64bit systems

[Tor Bug Tracker & Wiki]

#20381: Tor Browser nightly bundles crash on Linux 64bit systems
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Very High            |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-crash,
     Severity:  Critical             |  TorBrowserTeam201610,
                                     |  GeorgKoppen201610
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 A couple of hours ago I hit a crash which is reproducible with the
 following backtrace:
 {{{
 Thread 1 "firefox" received signal SIGSEGV, Segmentation fault.
 0x00007ffff3e2cbe1 in js::jit::SnapshotIterator::numAllocations (
     this=0x7fffffff6200)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:2159
 2159    /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp: Datei
 oder Verzeichnis nicht gefunden.
 (gdb) bt
 #0  0x00007ffff3e2cbe1 in js::jit::SnapshotIterator::numAllocations (
     this=0x7fffffff6200)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:2159
 #1  js::jit::IonFrameStackDepthOp::IonFrameStackDepthOp (frame=...,
     this=<optimized out>)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:421
 #2  js::jit::TryNoteIterIon::TryNoteIterIon (frame=..., cx=0x7fffdf71d800,
     this=0x7fffffff61c0)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:431
 #3  js::jit::HandleExceptionIon (overrecursed=0x7fffffff60af,
 rfe=0x7fffffff6660,
     frame=..., cx=0x7fffdf71d800)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:478
 #4  js::jit::HandleException (rfe=0x7fffffff6660)
     at /home/debian/build/tor-browser/js/src/jit/JitFrames.cpp:853
 }}}
 We did not change anything recently JIT code related.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20381>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online