--- a/js/src/vm/JSScript.cpp
+++ b/js/src/vm/JSScript.cpp
@@ -4632,33 +4632,33 @@ void JSScript::finalize(JSFreeOp* fop) {
   // fullyInitFromEmitter().
 
   if (coverage::IsLCovEnabled()) {
     coverage::CollectScriptCoverage(this);
   }
 
   fop->runtime()->geckoProfiler().onScriptFinalized(this);
 
-  // Finalize the base-script fields.
-  BaseScript::finalize(fop);
-
-  if (hasJitScript()) {
-    releaseJitScriptOnFinalize(fop);
-  }
-
   destroyScriptCounts();
   DebugAPI::destroyDebugScript(fop, this);
 
 #ifdef MOZ_VTUNE
   if (zone()->scriptVTuneIdMap) {
     // Note: we should only get here if the VTune JIT profiler is running.
     zone()->scriptVTuneIdMap->remove(this);
   }
 #endif
 
+  // Finalize the base-script fields.
+  BaseScript::finalize(fop);
+
+  if (hasJitScript()) {
+    releaseJitScriptOnFinalize(fop);
+  }
+
   freeScriptData();
 
   // In most cases, our LazyScript's script pointer will reference this
   // script, and thus be nulled out by normal weakref processing. However, if
   // we unlazified the LazyScript during incremental sweeping, it will have a
   // completely different JSScript.
   MOZ_ASSERT_IF(
       lazyScript && !IsAboutToBeFinalizedUnbarriered(&lazyScript),