Closed Bug 522072 Opened 16 years ago Closed 16 years ago

invalid pointer access (0xfeeefeee) in NativeToValueBase()

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 522024

People

(Reporter: soubok, Unassigned)

Details

(Whiteboard: [sg:dupe 522024])

Attachments

(1 file)

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 Build Identifier: tracemonkey tip I am trying to reduce the JavaScript code that rise this. Reproducible: Always
Version: unspecified → Trunk
Franck, the code snippet that causes this would be great. I will hide the bug in anticipation of the test case, since the triggering code is likely security sensitive.
Group: core-security
Ok, That bug seems to be related to my previous bug (bz#522024). When I stop playing with list.push(arguments); the invalid access no longer occurs.
Whiteboard: [sg:needinfo]
For now I can not reproduce the problem since bz522024 has been addressed.
from comment #3 and comment #4 this sounds like the same bug.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
Whiteboard: [sg:needinfo] → [sg:dupe 522024]
Group: core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: