Closed
Bug 1265414
Opened 8 years ago
Closed 8 years ago
crash in js::gc::GCRuntime::markBufferedGrayRoots
Categories
(Core :: JavaScript: GC, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1280591
People
(Reporter: milan, Unassigned)
Details
(Keywords: crash)
This bug was filed from the Socorro interface and is report bp-a9783868-836a-4aae-a12a-df54b2160416. ============================================================= ~3000 in the past week, majority on OS X, but across multiple platforms from what I can tell. This particular crash was mine, Macbook Air, just scrolling Facebook.
Comment 1•8 years ago
|
||
It looks like null pointer dereference marking the buffered gray roots, but we would crash if we attempted to add a null cell pointer to the gray root buffer because we call zone() on it first.
Comment 2•8 years ago
|
||
I've hit this as well.
Updated•8 years ago
|
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Updated•8 years ago
|
Crash Signature: [@ js::gc::GCRuntime::markBufferedGrayRoots]
You need to log in
before you can comment on or make changes to this bug.
Description
•