Assertion failure: !isInside(*pSlotsElems), at gc/Nursery.cpp:481

RESOLVED FIXED in Firefox 36

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
4 years ago
2 years ago

People

(Reporter: bhackett, Assigned: bhackett)

Tracking

(Blocks: 1 bug, 4 keywords)

Trunk
mozilla36
x86_64
Linux
assertion, regression, sec-high, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox33 disabled, firefox34 disabled, firefox35 disabled, firefox36 fixed, firefox-esr31 disabled)

Details

(Whiteboard: [jsbugmon:update,ignore])

(Assignee)

Description

4 years ago
+++ This bug was initially created as a clone of Bug #1096026 +++

Cloned from bug 1096026 to simplify tracking, see bug 1096026 comment 31.  This bug tracks the typed object tracing issues posted in that bug.
status-firefox36: --- → disabled
status-firefox37: --- → affected
status-firefox-esr31: --- → disabled
Keywords: leave-open
Whiteboard: [jsbugmon:update,ignore][adv-main34+] → [jsbugmon:update,ignore]
https://hg.mozilla.org/mozilla-central/rev/332af9f76b83
Status: NEW → RESOLVED
Last Resolved: 4 years ago
status-firefox36: disabled → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
Assignee: nobody → bhackett1024
status-firefox37: affected → ---

Comment 3

4 years ago
This is disabled on non-trunk builds?
Yes.
status-firefox33: --- → disabled
status-firefox34: --- → disabled
status-firefox35: --- → disabled
Depends on: 1105116
This test is going to burn after tomorrow's uplift:
https://tbpl.mozilla.org/php/getParsedLog.php?id=53560693&tree=Try
Flags: needinfo?(bhackett1024)
Depends on: 1105806
(Assignee)

Updated

4 years ago
Flags: needinfo?(bhackett1024)
Group: javascript-core-security

Updated

3 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.