Open
Bug 1901404
Opened 29 days ago
Updated 17 days ago
Assertion failure: maxOutputSizeChecked.isValid(), at /root/src/mfbt/Compression.cpp:43
Categories
(Core :: JavaScript Engine, defect, P3)
Core
JavaScript Engine
Tracking
()
UNCONFIRMED
People
(Reporter: nils.bars, Unassigned)
References
(Blocks 2 open bugs)
Details
Attachments
(1 file)
|
124 bytes,
application/x-javascript
|
Details |
Steps to reproduce:
This might be related to bug 1900525.
Checkout commit 15778b8c32f8535624fff2af36fc669e65a9af3 and invoke the js shell as follows:
/root/js-spidermonkey-shell --fuzzing-safe <testcase>
Actual results:
Assertion failure: maxOutputSizeChecked.isValid(), at /root/src/mfbt/Compression.cpp:43
Group: firefox-core-security → core-security
Component: Untriaged → JavaScript Engine
Product: Firefox → Core
|
||
Updated•29 days ago
|
Group: core-security → javascript-core-security
|
||
Comment 2•28 days ago
|
||
Yeah it's likely a similar issue but this one is decompressLZ4.
Group: javascript-core-security
|
||
Updated•27 days ago
|
You need to log in
before you can comment on or make changes to this bug.
Description
•