Closed Bug 677589 Opened 14 years ago Closed 14 years ago

[jsdbg2] Crash [@ JSObject::getClass] when cloning null

Categories

(Core :: JavaScript Engine, defect)

Other Branch
x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: decoder, Assigned: jorendorff)

Details

(Keywords: crash, testcase)

Crash Data

Attachments

(1 file)

The following code crashes on jsdbg2 branch (revision f189dd6316eb, options -j -m -a -d): var g2 = newGlobal('new-compartment'); g2.clone(null); Looks like a simple null-pointer deref, probably a minor problem.
Attached patch v1Splinter Review
Assignee: general → jorendorff
Attachment #551852 - Flags: review?(jimb)
Attachment #551852 - Flags: review?(jimb) → review+
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
A testcase for this bug was automatically identified at js/src/tests/js1_8_5/extensions/regress-677589.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: