Closed Bug 1716988 Opened 5 years ago Closed 5 years ago

AddressSanitizer: stack-overflow [@ __asan_memset] in JS parser

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect

Tracking

()

RESOLVED DUPLICATE of bug 1716940
Tracking Status
firefox91 --- affected

People

(Reporter: decoder, Unassigned)

Details

(Keywords: crash, regression)

Attachments

(1 file)

The attached crash information was submitted via the ASan Nightly Reporter on mozilla-central-asan-nightly revision 91.0a1-20210616214200-https://hg.mozilla.org/mozilla-central/rev/36647ef6f014ee7199a0bad93851750ead132473.

For detailed crash information, see attachment.

This looks like a simple over-recursion in the JS parser, we might be missing some check. This can likely be fixed just from the stack.

Severity: -- → S2
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: