Closed Bug 1037723 Opened 7 years ago Closed 7 years ago

Shell-only crash [@ EncodeLatin1] with Symbol

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla34
Tracking Flags:
Tracking Status
firefox33 --- affected

People

(Reporter: decoder, Assigned: evilpie)

Details

(Keywords: crash, testcase, Whiteboard: [jsbugmon:update])

Crash Data

Attachments

(2 files, 1 obsolete file)

[crash-signature] Machine-readable crash signature
214 bytes, text/plain
Details
bug-1037723
897 bytes, patch
jandem
: review+
Details | Diff | Splinter Review 
The following testcase crashes on mozilla-central revision e1a037c085d1 (run with --fuzzing-safe):


var sym = Symbol.for("hello");
assertEq(sym in environment, true);
Another symbol thing, needinfo from jorendorff.
status-firefox33: --- → affected
Flags: needinfo?(jorendorff)
Whiteboard: [jsbugmon:update]
Attachment #8454775 - Attachment is obsolete: true
Attached patch bug-1037723 — — Splinter Review
Assignee: nobody → evilpies
Status: NEW → ASSIGNED
Attachment #8470871 - Flags: review?(jdemooij)
Attachment #8470871 - Flags: review?(jdemooij) → review+
https://hg.mozilla.org/mozilla-central/rev/a26fd3f83a55
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla34
Flags: qe-verify-
Duplicate of this bug: 1057587
Flags: needinfo?(jorendorff)
You need to log in before you can comment on or make changes to this bug.