Closed
Bug 639737
Opened 13 years ago
Closed 11 years ago
Crash [@ JSObject::getClass | castNativeFromWrapper] with deep map recursion
Categories
(Core :: XPConnect, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: mrbkap)
Details
(Keywords: crash, testcase, Whiteboard: fixed-in-tracemonkey)
Crash Data
Attachments
(3 files)
Even though there is a lot of recursion on the stack, this is *not* a hit-the-stack-boundary-guard-page crash. Instead, it is a null deref. The signature is similar to bug 601411, but I don't think this bug is GC-related.
|
Reporter | |
Comment 1•13 years ago
|
||
|
Assignee | |
Comment 2•13 years ago
|
||
Duh.
|
||
Updated•13 years ago
|
Attachment #517839 -
Flags: review?(jst) → review+
|
|
Assignee | |
Comment 3•13 years ago
|
||
http://hg.mozilla.org/tracemonkey/rev/76937e2d3e93
Whiteboard: fixed-in-tracemonkey
|
||
Updated•13 years ago
|
Crash Signature: [@ JSObject::getClass | castNativeFromWrapper]
|
|
Assignee | |
Comment 4•11 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/76937e2d3e93
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•