Closed
Bug 1103273
Opened 10 years ago
Closed 9 years ago
Assertion failure: !isInside(*pSlotsElems), at gc/Nursery.cpp:481
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla36
People
(Reporter: bhackett1024, Assigned: bhackett1024)
References
Details
(4 keywords, Whiteboard: [jsbugmon:update,ignore])
+++ This bug was initially created as a clone of Bug #1096026 +++ Cloned from bug 1096026 to simplify tracking, see bug 1096026 comment 31. This bug tracks the typed object tracing issues posted in that bug.
Updated•10 years ago
|
status-firefox36:
--- → disabled
status-firefox37:
--- → affected
status-firefox-esr31:
--- → disabled
Keywords: leave-open
Whiteboard: [jsbugmon:update,ignore][adv-main34+] → [jsbugmon:update,ignore]
Assignee | ||
Comment 1•9 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/332af9f76b83
Comment 2•9 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/332af9f76b83
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
Updated•9 years ago
|
Assignee: nobody → bhackett1024
status-firefox37:
affected → ---
Comment 3•9 years ago
|
||
This is disabled on non-trunk builds?
Comment 4•9 years ago
|
||
Yes.
Comment 5•9 years ago
|
||
This test is going to burn after tomorrow's uplift: https://tbpl.mozilla.org/php/getParsedLog.php?id=53560693&tree=Try
Flags: needinfo?(bhackett1024)
Assignee | ||
Updated•9 years ago
|
Flags: needinfo?(bhackett1024)
Updated•9 years ago
|
Group: javascript-core-security
Updated•9 years ago
|
Group: core-security → core-security-release
Updated•8 years ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•