Closed Bug 1637566 Opened 3 months ago Closed 3 months ago

FinalizationRegistrationsObject's Records slot created as FinalizationRecordVector but used as WeakFinalizationRecordVector

Categories

(Core :: JavaScript: GC, defect)

defect

Tracking

()

RESOLVED FIXED
mozilla78
Tracking Status
firefox78 --- fixed

People

(Reporter: anba, Assigned: jonco)

Details

Attachments

(1 file)

FinalizationRegistrationsObject::create creates a FinalizationRecordVector, but later that slot is always read as a WeakFinalizationRecordVector.

Assignee: nobody → jcoppeard
Severity: -- → S4
Pushed by jcoppeard@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/9685e26fe77d
FinalizationRegistrationsObject's Records slot should be created as a WeakFinalizationRecordVector r=anba
Status: NEW → RESOLVED
Closed: 3 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla78
You need to log in before you can comment on or make changes to this bug.