The default bug view has changed. See this FAQ.

Assertion failure: !start->hasTable(), at ../../jsscope.h:751 after OOM

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: Paul Biggar, Unassigned)

Tracking

(Blocks: 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [fixed-in-tracemonkey])

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
Created attachment 536117 [details] [diff] [review]
fix

Shape::hashify can call setTable even on OOM (when getTable()->init() fails). However, Shape::search() assumes that hasTable() will be false on OOM. This makes search()'s assumption true.
Attachment #536117 - Flags: review?(nnethercote)
Comment on attachment 536117 [details] [diff] [review]
fix

Review of attachment 536117 [details] [diff] [review]:
-----------------------------------------------------------------
Attachment #536117 - Flags: review?(nnethercote) → review+
(Reporter)

Comment 2

6 years ago
http://hg.mozilla.org/tracemonkey/rev/a4eae71fad7a
Whiteboard: [fixed-in-tracemonkey]
(Reporter)

Comment 3

6 years ago
cdleary-bot missed this.
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.