Closed Bug 1902910 Opened 22 days ago Closed 18 days ago

Assertion failure: (iter_[0] == 'u' && iter_[1] == '-') || iter_[0] == '-', at builtin/intl/Locale.cpp:196

Categories

(Core :: JavaScript Engine, defect, P3)

Product:
Core
Component:
JavaScript Engine
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Milestone:
129 Branch
Tracking Flags:
Tracking Status
firefox129 --- fixed

People

(Reporter: nils.bars, Assigned: anba)

References

(Blocks 2 open bugs)

Details

Attachments

(2 files, 1 obsolete file)

bug_complete.js
95 bytes, text/plain
Details
Bug 1902910: Adjust assertions to allow Unicode extensions in non-canonical case. r=#spidermonkey-reviewers!
48 bytes, text/x-phabricator-request
Details | Review
Attached file bug.js (obsolete) —

Steps to reproduce:

Checkout commit 97eeb1c55a5c73bd3938d4899685321a7967333b and invoke the js shell as follows:

js --fuzzing-safe  <testcase>

Actual results:

Assertion failure: (iter_[0] == 'u' && iter_[1] == '-') || iter_[0] == '-', at builtin/intl/Locale.cpp:196
Group: firefox-core-security → core-security
Component: Untriaged → JavaScript Engine
Product: Firefox → Core
Group: core-security → javascript-core-security
Summary: ssertion failure: (iter_[0] == 'u' && iter_[1] == '-') || iter_[0] == '-', at builtin/intl/Locale.cpp:196 → Assertion failure: (iter_[0] == 'u' && iter_[1] == '-') || iter_[0] == '-', at builtin/intl/Locale.cpp:196
Attachment #9407735 - Attachment mime type: application/x-javascript → text/plain

I can't reproduce this issue. Is the test case perhaps incomplete?

Flags: needinfo?(nils.bars)
Attached file bug_complete.js —

You are correct, this is the complete test case, sorry!

Attachment #9407735 - Attachment is obsolete: true
Flags: needinfo?(nils.bars)
Assignee: nobody → andrebargull
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true

(In reply to Nils Bars from comment #2)

You are correct, this is the complete test case, sorry!

Thanks! I could reproduce with the updated test case.

Group: javascript-core-security

The testcase does not reproduce with the latest debug js shell from FTP (2015-10-21) but reproduces with m-c rev a5887514ddfb (Feb 2022).

Blocks: js-lang
Severity: -- → S3
Priority: -- → P3
Pushed by andre.bargull@gmail.com:
https://hg.mozilla.org/integration/autoland/rev/73983af52852
Adjust assertions to allow Unicode extensions in non-canonical case. r=spidermonkey-reviewers,dminor

https://hg.mozilla.org/mozilla-central/rev/73983af52852

Status: ASSIGNED → RESOLVED
Closed: 18 days ago
status-firefox129: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 129 Branch
Blocks: 1903968
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: