Closed Bug 1901409 Opened 29 days ago Closed 28 days ago

Assertion failure: offset_ != (4294967295U), at /root/src/js/src/wasm/WasmModuleTypes.h:333

Categories

(Core :: JavaScript: WebAssembly, defect)

defect

Tracking

()

RESOLVED DUPLICATE of bug 1886703

People

(Reporter: nils.bars, Unassigned)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

601 bytes, application/x-javascript
Details

Steps to reproduce:

This is probably related to bug 1886703.
Checkout commit 15778b8c32f8535624fff2af36fc669e65a9af3 and invoke the js shell as follows:

/root/js-spidermonkey-shell  --fuzzing-safe  <testcase>

Actual results:

Assertion failure: offset_ != (4294967295U), at /root/src/js/src/wasm/WasmModuleTypes.h:333
Group: firefox-core-security → core-security
Component: Untriaged → JavaScript Engine
Product: Firefox → Core
Attached file bug.js
Group: core-security → javascript-core-security

Yury, is this similar to bug 1886703?

Flags: needinfo?(ydelendik)
Component: JavaScript Engine → JavaScript: WebAssembly
Status: UNCONFIRMED → RESOLVED
Closed: 28 days ago
Duplicate of bug: 1886703
Flags: needinfo?(ydelendik)
Resolution: --- → DUPLICATE
Group: javascript-core-security
Blocks: 1903968
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: