Closed
Bug 623378
Opened 14 years ago
Closed 14 years ago
Firefox 4.0b9pre crash in [@ js::RegExpStatics::updateFromMatch(JSContext*, JSLinearString*, int*, unsigned int) ]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 606882
| Tracking | Status | |
|---|---|---|
| blocking2.0 | --- | betaN+ |
People
(Reporter: marcia, Assigned: luke)
References
()
Details
(Keywords: crash, testcase, Whiteboard: [sg:critical?][hardblocker])
Crash Data
Attachments
(1 file)
|
319 bytes,
text/html
|
Details |
Spinoff of Bug 595351 which was requested during Critsmash triage since it has a test case and it reproducible. See that bug for the reproducible testcase.
Frame Module Signature [Expand] Source
0 mozjs.dll js::RegExpStatics::updateFromMatch js/src/jsregexp.h:188
1 mozjs.dll js::RegExp::executeInternal js/src/jsregexpinlines.h:351
|
Reporter | |
Updated•14 years ago
|
Blocks: SadJägerMonkey
|
||
Updated•14 years ago
|
|
|
||
Comment 1•14 years ago
|
||
copying testcase from the other bug where it's a private attachment that can't be seen by folks CC'd here.
|
||
Comment 2•14 years ago
|
||
who can take?
|
Assignee | |
Updated•14 years ago
|
Assignee: general → lw
|
||
Comment 3•14 years ago
|
||
This might be a dup of bug 606882.
|
|
||
Updated•14 years ago
|
blocking2.0: ? → betaN+
|
|
||
Updated•14 years ago
|
Whiteboard: [sg:critical?] → [sg:critical?][hardblocker]
|
|
||
Comment 4•14 years ago
|
||
Confirmed fixed in a build that has fix for bug 606882.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
|
||
Updated•14 years ago
|
Crash Signature: [@ js::RegExpStatics::updateFromMatch(JSContext*, JSLinearString*, int*, unsigned int) ]
|
|
||
Updated•11 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•