Closed
Bug 698156
Opened 13 years ago
Closed 13 years ago
TI: Assertion failure: addr % Cell::CellSize == 0, at ../../jsgc.h:711
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: decoder, Assigned: bhackett1024)
References
Details
(Keywords: assertion, testcase)
Attachments
(2 files)
|
4.76 KB,
application/x-tar
|
Details | |
|
564 bytes,
patch
|
luke
:
review+
|
Details | Diff | Splinter Review |
The attached testcase asserts on jaegermonkey revision b01eb1ba58ce (run with -m -n), tested on 64 bit.
|
Reporter | |
Updated•13 years ago
|
Version: Trunk → Other Branch
|
Assignee | |
Comment 1•13 years ago
|
||
GC hazard when constructing functions, setSingletonType can now trigger GC and was called before a new function was fully initialized. https://hg.mozilla.org/projects/jaegermonkey/rev/6c7f986274b9
Assignee: general → bhackett1024
Attachment #570554 -
Flags: review?(luke)
|
|
Assignee | |
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
|
||
Updated•13 years ago
|
Attachment #570554 -
Flags: review?(luke) → review+
|
|
Reporter | |
Updated•11 years ago
|
Attachment #570430 -
Attachment mime type: text/plain → application/x-tar
You need to log in
before you can comment on or make changes to this bug.
Description
•