Closed Bug 397311 Opened 14 years ago Closed 14 years ago

Crash at js3250!JS_ValueToObject running test_js_weak_references.js

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

VERIFIED FIXED

People

(Reporter: WeirdAl, Assigned: bent.mozilla)

References

Details

(Keywords: crash, testcase)

Attachments

(2 files)

Attached file stack trace
Firefox trunk build from today, with this mozconfig:

#
# See http://www.mozilla.org/build/ for build instructions.
#

. $topsrcdir/browser/config/mozconfig

# Options for client.mk.
mk_add_options MOZ_CO_PROJECT=suite,browser,mail,xulrunner
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../fx-debug

# Options for 'configure' (same as command-line options).
ac_add_options --enable-svg
ac_add_options --enable-mathml
ac_add_options --disable-installer
ac_add_options --disable-activex
ac_add_options --disable-activex-scripting
ac_add_options --disable-xpconnect-idispatch
ac_add_options --enable-debug
ac_add_options --disable-optimize
ac_add_options --enable-chrome-format=flat
ac_add_options --enable-extensions=default,venkman,inspector
ac_add_options --disable-accessibility

I've been seeing JS assertion failures running the same test on Mac, but I haven't reported it yet because I couldn't get a useful stack.
Flags: blocking1.9?
Blocks: 317304
Attached patch Likely fixSplinter Review
Need an autorequest.
Attachment #282071 - Flags: review?(brendan)
Blocks: 396452
No longer blocks: 317304
Ben, care to take this bug?

/be
Comment on attachment 282071 [details] [diff] [review]
Likely fix

More like this? Look for GetArgvPtr.

/be
Attachment #282071 - Flags: review?(brendan) → review+
Yeah, there are a few others. Patch in a bit.
Comment on attachment 282071 [details] [diff] [review]
Likely fix

sr+a=jst
Attachment #282071 - Flags: superreview+
Attachment #282071 - Flags: approval1.9?
Attachment #282071 - Flags: approval1.9+
Filed bug 397319 for the remaining uses of GetArgvPtr.
Assignee: general → bent.mozilla
Fixed.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
test not in js suite but in xpconnect at /js/src/xpconnect/tests/unit/test_js_weak_references.js
Flags: in-testsuite+
clearing blocking flag on a fixed bug
Flags: blocking1.9?
v 1.9.0 based on tinderbox logs
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.