Closed Bug 1493476 Opened 6 years ago Closed 6 years ago

Assertion failure: false (JS_GetProperty(cx, module, "int32", &typeDescr)), at js/src/builtin/TypedObject.cpp:1421

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1493335
Tracking Status
firefox64 --- fixed

People

(Reporter: gkw, Assigned: lth)

References

Details

(4 keywords, Whiteboard: [jsbugmon:update])

Attachments

(1 file)

The following testcase crashes on mozilla-central revision 221c18ebe962 (build with --enable-debug --enable-more-deterministic, run with --fuzzing-safe --no-threads --no-baseline --no-ion):

oomTest(function() {
    evalcx("", print());
})

Backtrace:

#0  0x000055aac37544d6 in js::GlobalObject::initTypedObjectModule (cx=0x7f7595716000, global=...) at js/src/builtin/TypedObject.cpp:1421
#1  0x000055aac3ad43fe in js::GlobalObject::createObject (cx=0x7f7595716000, global=..., slot=47, init=0x55aac3752970 <js::GlobalObject::initTypedObjectModule(JSContext*, JS::Handle<js::GlobalObject*>)>) at js/src/vm/GlobalObject.cpp:310
#2  0x000055aac37ad70b in js::GlobalObject::getOrCreateObject (cx=0x7f7595716000, slot=47, init=0xb40, global=...) at js/src/vm/GlobalObject.h:574
#3  js::GlobalObject::getOrCreateTypedObjectModule (cx=0x7f7595716000, global=...) at js/src/vm/GlobalObject.h:473
#4  0x000055aac3ad2ed9 in js::GlobalObject::resolveConstructor (cx=0x7f7595716000, global=..., key=<optimized out>) at js/src/vm/GlobalObject.cpp:178
/snip

For detailed crash information, see attachment.
autobisectjs shows this is probably related to the following changeset:

The first bad revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/29614e10d512
user:        Lars T Hansen
date:        Wed May 09 11:35:47 2018 +0200
summary:     Bug 1459900 - Implement struct.new. r=luke

Lars, is bug 1459900 a likely regressor?
Blocks: 1459900
Flags: needinfo?(lhansen)
Likely same as bug 1493335.
Assignee: nobody → lhansen
Status: NEW → ASSIGNED
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Flags: needinfo?(lhansen)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: