Last Comment Bug 649439 - TI: crash [@JSObject::getClass]
: TI: crash [@JSObject::getClass]
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: unspecified
: All All
-- normal (vote)
: ---
Assigned To: general
: Jason Orendorff [:jorendorff]
Depends on:
Blocks: infer-regress 630996
  Show dependency treegraph
Reported: 2011-04-12 11:40 PDT by Jan de Mooij [:jandem]
Modified: 2011-04-13 07:18 PDT (History)
4 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Description User image Jan de Mooij [:jandem] 2011-04-12 11:40:45 PDT
var o1 = new String("abc");
var o2 = o1[1];
Crashes with -n -a at revision a4131835b866.
Comment 1 User image Brian Hackett (:bhackett) 2011-04-13 07:18:28 PDT
Regression from a recent merge from TM where the new way the String class is initialized caused reentrancy problems.  There was a similar bug for other standard classes fixed recently, the duplicate functionality in this area is kind of unfortunate.

Note You need to log in before you can comment on or make changes to this bug.