Closed Bug 652439 Opened 13 years ago Closed 13 years ago

JS Shell crashes on low values of -A

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
All
Linux
Type:
defect
Priority:
Not set
Severity:
minor

Tracking

()

Status:
RESOLVED DUPLICATE of bug 628332

People

(Reporter: decoder, Unassigned)

Details

(Keywords: crash) 

When passing very low values to the -A parameter of the js shell (number of allocations before OOM), the shell crashes during startup. When running "js -A 10" I get:

*** glibc detected *** /home/decoder/LangFuzz/tracemonkey/js32/src/js: double free or corruption (out): 0x08965818 ***


Not security relevant, but not intended behavior either I guess. If there is just some OOM check missing there, then I can even fix this myself maybe ;)
No longer blocks: infer-regress
Known problem, working on a fix in the original bug report.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.