Closed
Bug 460180
Opened 17 years ago
Closed 17 years ago
Crash [@ js_FoldConstants] with if (false || false || <x/>)
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: mrbkap)
References
Details
(Keywords: crash, testcase)
Crash Data
Attachments
(1 file)
|
616 bytes,
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
js> if (false || false || <x/>) { }
Crash [@ js_FoldConstants]
| Assignee | ||
Comment 1•17 years ago
|
||
Comment 2•17 years ago
|
||
Comment on attachment 343353 [details] [diff] [review]
Fix
Right. I'm giving you the keys ;-). Close this bug when the fix hits tm -- at least we never bothered m-c with my comedy of errors. Thanks,
/be
Attachment #343353 -
Flags: review?(brendan) → review+
| Assignee | ||
Comment 3•17 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Comment 4•17 years ago
|
||
/cvsroot/mozilla/js/tests/e4x/Regress/regress-460180.js,v <-- regress-460180.js
initial revision: 1.1
http://hg.mozilla.org/mozilla-central/rev/6e5c848a2183
Flags: in-testsuite+
Flags: in-litmus-
Comment 5•17 years ago
|
||
v 1.9.1 tracemonkey and it also passes mozilla-central.
Status: RESOLVED → VERIFIED
Updated•14 years ago
|
Crash Signature: [@ js_FoldConstants]
You need to log in
before you can comment on or make changes to this bug.
Description
•