Status
()
People
(Reporter: jruderman, Assigned: Waldo)
Tracking
(Blocks: 1 bug, {crash, testcase})
Firefox Tracking Flags
(Not tracked)
Details
Attachments
(1 attachment)
1.55 KB,
text/plain
|
Details |
Created attachment 558046 [details] stack trace (repeating portion only) var a = []; var sort = a.sort.bind(a); a.push(sort); a.push(sort); sort(sort); Crashes with too-much-recursion through array_sort. Similar to bug 671797, which involves array extras such as array_forEach. This bug goes all the way back to the introduction of Function.prototype.bind in bug 429507.
Updated•8 years ago
|
Whiteboard: js-triage-needed
(Reporter) | ||
Comment 1•7 years ago
|
||
Bug 715387 is another too-much-recursion crash involving array_sort. It's different in that it involves recursion through toString rather than through sort_compare.
![]() |
||
Comment 2•7 years ago
|
||
Fix and test landed in bug 779215. -> RESOLVED / VERIFIED FIXED
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Whiteboard: js-triage-needed
![]() |
||
Updated•7 years ago
|
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•