Closed
Bug 1423057
Opened 7 years ago
Closed 6 years ago
Assertion failure: !mTable (Tear-off objects remain in hashtable at shutdown.), at /builds/worker/workspace/build/src/dom/svg/nsSVGAttrTearoffTable.h:29
Categories
(Core :: SVG, defect, P3)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jkratzer, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
634 bytes,
text/html
|
Details |
Testcase found while fuzzing mozilla-central rev 709f355a7a8c.
OS|Linux|0.0.0 Linux 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64
CPU|amd64|family 6 model 69 stepping 1|1
GPU|||
Crash|SIGSEGV|0x0|0
0|0|libxul.so|nsSVGAttrTearoffTable<nsSVGEnum, nsSVGEnum::DOMAnimatedEnum>::~nsSVGAttrTearoffTable|hg:hg.mozilla.org/mozilla-central:dom/svg/nsSVGAttrTearoffTable.h:709f355a7a8c|29|0x5
0|1|libc-2.23.so||||0x39ff8
0|2|firefox|__libc_csu_fini|||0x10
0|3|firefox||||0x66d8
0|4|libc-2.23.so||||0x3a045
0|5|firefox|__libc_csu_fini|||0x10
0|6|libc-2.23.so||||0x20837
0|7|firefox|MOZ_ReportAssertionFailure|hg:hg.mozilla.org/mozilla-central:mfbt/Assertions.h:709f355a7a8c|165|0x5
Flags: in-testsuite?
Reporter | ||
Updated•7 years ago
|
Version: unspecified → 59 Branch
Updated•7 years ago
|
Priority: -- → P1
Updated•7 years ago
|
Priority: P1 → P3
Updated•6 years ago
|
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WORKSFORME
Comment 1•6 years ago
|
||
I can no longer reproduce the assertion failure, mark as WFM.
You need to log in
before you can comment on or make changes to this bug.
Description
•