Closed
Bug 1199764
Opened 10 years ago
Closed 10 years ago
crash in js::CloneFunctionObjectIfNotSingleton(JSContext*, JS::Handle<T>, JS::Handle<T>, JS::Handle<T>, js::NewObjectKind)
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1177898
| Tracking | Status | |
|---|---|---|
| firefox41 | --- | affected |
People
(Reporter: away, Unassigned)
References
Details
(Keywords: crash)
Crash Data
This bug was filed from the Socorro interface and is
report bp-006cdf57-73e5-4bcd-9d27-673922150827.
=============================================================
This is a moderately-high crash on 41 beta.
getOrCreateScript() returned null at http://hg.mozilla.org/releases/mozilla-beta/annotate/c95314d6c388/js/src/jsfuninlines.h#l92
# ChildEBP RetAddr
00 003cb78c 5235e30f xul!js::CloneFunctionObjectIfNotSingleton+0x28b
01 003cb7ac 523736ed xul!js::Lambda+0x1f
02 003cc620 528c7d06 xul!Interpret+0xad8d
03 003cc660 52364238 xul!js::RunScript+0x1b6
04 003cc704 526b630c xul!js::Invoke+0x168
05 003cc744 52364184 xul!js::fun_call+0xc9
06 003cc7ec 523725e8 xul!js::Invoke+0xb4
07 003cd658 528c7d06 xul!Interpret+0x9c88
Flags: needinfo?(shu)
status-firefox41:
--- → affected
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(shu)
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•