Open Bug 1380216 Opened 3 years ago Updated 3 years ago

Crash in [ js::TypeConstraint::checkMagic ] and [ JSScript::maybeSweepTypes ]

Categories

(Core :: JavaScript Engine, defect, P3)

Unspecified
Windows 7
defect

Tracking

()

People

(Reporter: ting, Unassigned)

References

Details

(Keywords: crash, triage-deferred)

Crash Data

This bug was filed from the Socorro interface and is 
report bp-317bb991-e456-448c-b567-6255f0170711.
=============================================================
Top #20 of Nightly 20170709030204 on Windows, I see two different types of crash: a) invalid memory access and b) unmatched magic, this is for (a).
Keywords: triage-deferred
Priority: -- → P3
See Also: → 1405197
Duplicate of this bug: 1405197
Crash Signature: [@ js::TypeConstraint::checkMagic] → [@ js::TypeConstraint::checkMagic] [@ JSScript::maybeSweepTypes]
See Also: 1405197
Summary: Crash in js::TypeConstraint::checkMagic → Crash in [ js::TypeConstraint::checkMagic ] and [ JSScript::maybeSweepTypes ]
You need to log in before you can comment on or make changes to this bug.