Closed Bug 641093 Opened 14 years ago Closed 13 years ago

crash in [@ js_IteratorMore]

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 637010

People

(Reporter: soubok, Unassigned)

Details

(Keywords: crash, Whiteboard: [sg:dos] null deref)

Crash Data

The following expression make the engine crash: Iterator.prototype.next(); (tested with FireFox4 RC1)
Group: core-security
Whiteboard: [sg:dos] null deref
Keywords: crash
Summary: crash in js_IteratorMore() → crash in [@ js_IteratorMore]
Crash Signature: [@ js_IteratorMore]
Yeah, bug 637010 comment 3 even shows an identical testcase.
Group: core-security
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.