1035325 - Assertion failure: !cx->isExceptionPending(), at jscntxtinlines.h:233 related to string encoding

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on mozilla-central revision 1dc6b294800d (run with --fuzzing-safe):


print("\uDBFF\uDFFF");

Comment 1

[Christian Holler (:decoder)]

Attachment: [crash-signature] Machine-readable crash signature

Comment 2

[André Bargull [:anba]]

Introduced in http://hg.mozilla.org/mozilla-central/rev/212f914cb83a (Bug 1025875)

Comment 3

[André Bargull [:anba]]

Attachment: Use uint32 when computing utf8 length

Comment 4

[Jan de Mooij [:jandem]]

Comment on attachment 8451898 [details] [diff] [review]
Use uint32 when computing utf8 length

Review of attachment 8451898 [details] [diff] [review]:
-----------------------------------------------------------------

Oops, thanks for fixing this!

Comment 5

[André Bargull [:anba]]

Attachment: Use uint32 when computing utf8 length

Update patch to include reviewer.

Comment 6

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/f9a0324345c7

Comment 7

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/f9a0324345c7