Closed
Bug 292167
Opened 19 years ago
Closed 19 years ago
E4X - GC Crash in online e4x/Regress/regress-280844-1.js
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 280844
People
(Reporter: bc, Assigned: brendan)
References
()
Details
(Keywords: crash)
Run js/tests/e4x/Regress/regress-280844-1.js in the browser (see bclary.com for hosted version) in WinXP. Heisenbug crashes multiple locations due to gc related problem. Stack to xml_DeutschSchorrWaite xml_DeutschSchorrWaite(JSContext * 0x04b3e080, JSXML * 0x04c8e8e0, void * 0x00000000) line 7118 js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8e8e0, void * 0x00000000) line 7211 + 17 bytes MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, unsigned char * 0x04c8e69c) line 1251 + 15 bytes js_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, void * 0x00000000) line 1424 + 17 bytes JS_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, const char * 0x011cc5ec _js_xml_parent_str, void * 0x00000000) line 1741 + 15 bytes js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8e980, void * 0x00000000) line 7213 + 25 bytes MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, unsigned char * 0x04c8e6b0) line 1251 + 15 bytes js_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, void * 0x00000000) line 1424 + 17 bytes JS_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, const char * 0x011cc5ec _js_xml_parent_str, void * 0x00000000) line 1741 + 15 bytes js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8ea20, void * 0x00000000) line 7213 + 25 bytes ... ad infinitum
Updated•19 years ago
|
Severity: major → critical
Comment 1•19 years ago
|
||
*** This bug has been marked as a duplicate of 280844 ***
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•