Closed Bug 1103273 Opened 5 years ago Closed 5 years ago

Assertion failure: !isInside(*pSlotsElems), at gc/Nursery.cpp:481

Categories

(Core :: JavaScript Engine, defect, critical)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla36
Tracking Status
firefox33 --- disabled
firefox34 --- disabled
firefox35 --- disabled
firefox36 --- fixed
firefox-esr31 --- disabled

People

(Reporter: bhackett, Assigned: bhackett)

References

(Blocks 1 open bug)

Details

(4 keywords, Whiteboard: [jsbugmon:update,ignore])

+++ This bug was initially created as a clone of Bug #1096026 +++

Cloned from bug 1096026 to simplify tracking, see bug 1096026 comment 31.  This bug tracks the typed object tracing issues posted in that bug.
Keywords: leave-open
Whiteboard: [jsbugmon:update,ignore][adv-main34+] → [jsbugmon:update,ignore]
https://hg.mozilla.org/mozilla-central/rev/332af9f76b83
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
Assignee: nobody → bhackett1024
This is disabled on non-trunk builds?
Depends on: 1105116
This test is going to burn after tomorrow's uplift:
https://tbpl.mozilla.org/php/getParsedLog.php?id=53560693&tree=Try
Flags: needinfo?(bhackett1024)
Depends on: 1105806
Flags: needinfo?(bhackett1024)
Group: javascript-core-security
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.