Closed Bug 474319 Opened 11 years ago Closed 11 years ago

[1.9.0.x branch] Hang involving gczeal, map, concat

Categories

(Core :: JavaScript Engine, defect, critical)

1.9.0 Branch
x86
Linux
defect
Not set
critical

Tracking

()

VERIFIED DUPLICATE of bug 472787

People

(Reporter: gkw, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: hang, testcase, Whiteboard: [sg:dupe 472787])

Attachments

(1 file)

gczeal(2);
(function(){[<y><z/></y>].map(''.concat)})();

hangs 1.9.0.x debug shell. I haven't had the time to test with 1.9.0.x opt shell with gczeal enabled. Seems to work as expected on debug trunk js shell, with or without "-j".

Security-sensitive because this involves gczeal.
Flags: blocking1.9.0.7?
See bug 472787 which does involve concat but doesn't involve map. That bug also has watch and defineSetter and Math.sin but this one doesn't.

However bug 472787 does seem to fix this issue. Dupe-ing.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: blocking1.9.0.7? → in-testsuite?
Resolution: --- → DUPLICATE
Duplicate of bug: 472787
Whiteboard: [sg:critical?]
Yeah, the key here is the |concat|.
Status: RESOLVED → VERIFIED
Flags: in-testsuite? → in-testsuite+
Group: core-security
Whiteboard: [sg:critical?] → [sg:dupe 472787]
http://hg.mozilla.org/tracemonkey/rev/b8dff82d2d84
/cvsroot/mozilla/js/tests/e4x/Regress/regress-474319.js,v  <--  regress-474319.js
initial revision: 1.1
You need to log in before you can comment on or make changes to this bug.