jit crash in js::CurrentThreadCanAccessZone(Zone* zone)

Following is the gdb debugging log：

Thread 1 "js" received signal SIGSEGV, Segmentation fault.
js::CurrentThreadCanAccessZone (zone=zone@entry=0x0) at
/home/kylin/mozilla-central/js/src/vm/Runtime.cpp:876
876    if (CurrentThreadCanAccessRuntime(zone->runtime_))
(gdb) bt
#0  js::CurrentThreadCanAccessZone (zone=zone@entry=0x0) at
/home/kylin/mozilla-central/js/src/vm/Runtime.cpp:876
#1  0x0000000000ab0a48 in js::gc::TenuredCell::zone (this=0x7ffff88000) at
/home/kylin/mozilla-central/js/src/gc/Heap.h:1261
#2  JSRope::flatten (this=this@entry=0x7ffff88000,
maybecx=maybecx@entry=0x7fb791a400)
at /home/kylin/mozilla-central/js/src/vm/String.cpp:562
#3  0x00000000004efaec in JSString::ensureLinear (cx=0x7fb791a400,
this=0x7ffff88000) at /home/kylin/mozilla-central/js/src/vm/String.h:1254
#4  js::AtomizeString (cx=0x7fb791a400, str=0x7ffff88000,
pin=pin@entry=js::DoNotPinAtom)
at /home/kylin/mozilla-central/js/src/jsatom.cpp:396
#5  0x00000000004f3d28 in js::ToAtom<(js::AllowGC)1> (cx=cx@entry=0x7fb791a400,
v=..., v@entry=...)
    at /home/kylin/mozilla-central/js/src/jsatom.cpp:510
#6  0x00000000004dfb00 in js::ValueToId<(js::AllowGC)1> (cx=0x7fb791a400,
v=..., idp=...) at /home/kylin/mozilla-central/js/src/jsatominlines.h:87
#7  0x00000000005ae088 in js::ToPropertyKey (cx=0x7fb791a400, argument=...,
result=...) at /home/kylin/mozilla-central/js/src/jsobjinlines.h:606
#8  0x00000000009f0cb4 in js::SetObjectElement (cx=cx@entry=0x7fb791a400,
obj=..., obj@entry=..., index=..., index@entry=..., value=...,
    value@entry=..., receiver=..., receiver@entry=..., strict=true,
script=..., script@entry=..., pc=pc@entry=0x7fb30850b6 "9QV")
    at /home/kylin/mozilla-central/js/src/vm/Interpreter.cpp:4398
#9  0x000000000059ce90 in js::jit::DoSetElemFallback (cx=0x7fb791a400,
frame=<optimized out>, stub_=<optimized out>, stack=0x7fb791a400, objv=...,
    index=..., rhs=...) at
/home/kylin/mozilla-central/js/src/jit/BaselineIC.cpp:2550
#10 0x0000007fb7fd0690 in ?? ()

Thanks，
sk
_______________________________________________
dev-tech-js-engine mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-js-engine