Closed
Bug 573963
Opened 15 years ago
Closed 12 years ago
Crash [@ js_NewObjectWithGivenProto] function in debug
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: dex_1988, Unassigned)
References
Details
(Keywords: crash)
Crash Data
User-Agent: Opera/9.80 (Windows NT 5.1; U; ru) Presto/2.5.24 Version/10.54
Build Identifier: http://releases.mozilla.org/pub/mozilla.org/firefox/releases/3.6.3/
if (clasp == &js_FunctionClass && !objectSize) {
obj = (JSObject*) js_NewGCFunction(cx, GCX_OBJECT);
#ifdef DEBUG
memset((uint8 *) obj + sizeof(JSObject), JS_FREE_PATTERN,
sizeof(JSFunction) - sizeof(JSObject));
#endif
If js_NewGCFunction return NULL (Out of memory) then memset is crashed
Reproducible: Always
|
||
Comment 1•15 years ago
|
||
dex: thanks, good catch. I will fix in the patch for bug 535416, about to land.
/be
Severity: normal → critical
Keywords: crash
Summary: Crash js_NewObjectWithGivenProto function in debug → Crash [@ js_NewObjectWithGivenProto] function in debug
|
||
Comment 2•14 years ago
|
||
(In reply to comment #1)
> I will fix in the patch for bug 535416, about to land.
>
> /be
OK to close?
|
||
Updated•14 years ago
|
Crash Signature: [@ js_NewObjectWithGivenProto]
|
|
||
Comment 3•12 years ago
|
||
all remaining crashes are 3.1.x
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Version: unspecified → 1.9.2 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•