Closed
Bug 1148874
Opened 9 years ago
Closed 9 years ago
Assertion failure: vp.toString()->isAtom(), at js/src/jit/MIR.cpp:713
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1148883
People
(Reporter: dbaron, Unassigned)
References
()
Details
(Keywords: assertion, crash)
Attachments
(1 file)
7.29 KB,
text/plain
|
Details |
I can reliably reproduce: Assertion failure: vp.toString()->isAtom(), at js/src/jit/MIR.cpp:713 by loading the page: http://www.economist.com/blogs/freeexchange/2015/03/wealth-inequality?fsrc=scn%2Ftw%2Fte%2Fbl%2Fed%2Fnimbysinthetwentyfirstcentury
Reporter | ||
Comment 1•9 years ago
|
||
(This is in a Linux x86_64 debug build based off of mozilla-central from earlier today.)
Reporter | ||
Comment 2•9 years ago
|
||
Reporter | ||
Comment 3•9 years ago
|
||
Assertion added in https://hg.mozilla.org/mozilla-central/rev/d4cac14b98af , landed yesterday.
Blocks: 1134074
Flags: needinfo?(nicolas.b.pierron)
Reporter | ||
Comment 4•9 years ago
|
||
Also fires on http://www.womenon20s.org/
Comment 5•9 years ago
|
||
I also get this on http://techcrunch.com/
Comment 6•9 years ago
|
||
The patch in bug 1148883 fixes the TechCrunch assertion for me.
Comment 7•9 years ago
|
||
(In reply to David Baron [:dbaron] ⏰UTC-7 from comment #2) > Created attachment 8585129 [details] > brief gdb session Thanks for the stack trace :) This looks like the same code path as the one fixed in Bug 1148883.
Status: NEW → RESOLVED
Closed: 9 years ago
Flags: needinfo?(nicolas.b.pierron)
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•