Assertion failure: fp, in jsobj.c

VERIFIED FIXED

Status

()

Core
JavaScript Engine
VERIFIED FIXED
10 years ago
10 years ago

People

(Reporter: bc, Assigned: Igor Bukanov)

Tracking

({regression, testcase, verified1.8.1.13})

1.8 Branch
x86
All
regression, testcase, verified1.8.1.13
Points:
---
Bug Flags:
blocking1.8.1.13 +
blocking1.8.0.next -
in-testsuite +
in-litmus -

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [sg:nse])

(Reporter)

Description

10 years ago
js1_7/extensions/regress-353249.js,
js1_7/regress/regress-352797-02.js

Assertion failure: fp, at js/src/jsobj.c:2004

sensitive since bug 416705 is.
Flags: in-testsuite+
Flags: in-litmus-
Flags: blocking1.8.1.13?
(Reporter)

Comment 1

10 years ago
/cvsroot/mozilla/js/tests/public-failures.txt,v  <--  public-failures.txt
new revision: 1.47; previous revision: 1.46
blocking on regression from security fix.

Igor: is this easy to fix, or would it be better to back out 416705 for this branch release?

Yay for extensive tests!
Flags: blocking1.8.1.13? → blocking1.8.1.13+
(Reporter)

Updated

10 years ago
Whiteboard: [sg:nse]
(Assignee)

Comment 3

10 years ago
(In reply to comment #2)
> Igor: is this easy to fix, or would it be better to back out 416705 for this
> branch release?

I suggest to back out bug 416705. I will have the proper and very targeted fix later today. The problem is that on the branch PutBlockObjects does not stop at the right moment.
(Reporter)

Comment 4

10 years ago
fixed by backing out of patch in bug 416705

/cvsroot/mozilla/js/tests/public-failures.txt,v  <--  public-failures.txt
new revision: 1.48; previous revision: 1.47
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → FIXED
Keywords: fixed1.8.1.13
(Reporter)

Comment 5

10 years ago
verified fixed 1.8.1.13
Keywords: fixed1.8.1.13 → verified1.8.1.13
(Reporter)

Updated

10 years ago
Status: RESOLVED → VERIFIED

Updated

10 years ago
Flags: blocking1.8.0.15+

Comment 6

10 years ago
js1.7 not applicable on 1.8.0 branch.
Flags: blocking1.8.0.15+ → blocking1.8.0.15-
Group: security
You need to log in before you can comment on or make changes to this bug.