70332 - Infinite recursion in JS_ReportOutOfMemory

Status: VERIFIED DUPLICATE of bug 60164

(Core :: JavaScript Engine, defect)

Description

[Marek Fort]

Javascript engine (SpiderMonkey v1.5) goes to infinite recursion when
reporting out of memory. The function JS_ReportOutOfMemory tries to allocate
some piece of memory which cause calling JS_ReportOutOfMemory. 

See my stack trace:
   ... cut here ...
   68 JS_ReportOutOfMemory(cx = 0x10291548) 
   69 js_AllocGCThing(cx = 0x10291548, flags = 1) 
   70 js_NewString(cx = 0x10291548, chars = 0x10d0dda0, length = 5, gcflag = 0) 
   71 js_NewStringCopyN(cx = 0x10291548, s = 0x77d5d9b0, n = 5, gcflag = 0) 
   72 js_AtomizeString(cx = 0x10291548, str = 0x77d5da00, flags = 2) 
   73 js_Atomize(cx = 0x10291548, bytes = 0x5fff4ed0 = "Error", length = 5,
flags = 0) 
   74 FindConstructor(cx = 0x10291548, name = 0x5fff4ed0 = "Error", vp =
0x77d5dab0) 
   75 js_GetClassPrototype(cx = 0x10291548, name = 0x5fff4ed0 = "Error", protop
= 0x77d5db18)
   76 js_ErrorToException(cx = 0x10291548, message = 0x10d0dd88 = "out of
memory", reportp = 0x77d5dbb0) 
   77 ReportError(cx = 0x10291548, message = 0x10d0dd88 = "out of memory",
reportp = 0x77d5dbb0)
   78 js_ReportErrorNumberVA(cx = 0x10291548, flags = 0, callback = 0x5ff54650,
userRef = (nil), errorNumber = 137, charArgs = 1, ap = 0x77d5dc80 = "") 
   79 JS_ReportErrorNumber(cx = 0x10291548, errorCallback = 0x5ff54650, userRef
= (nil), errorNumber = 137, ... = <void>)
   80 JS_ReportOutOfMemory(cx = 0x10291548)
   ... cut here ...

Comment 1

[Andreas Franke (gone)]

See also bug 46196 and bug 60164. 

Comment 2

[Phil Schwartau]

Marek, how recent is your JS source? Is is from the RC2 tarball (Aug 2000)? 
If so, that would explain the problem, as the fixes for bug 46196 and bug 60164
weren't put in until later in the year...

Comment 3

[Marek Fort]

My source is from 1.5rc2 tarball. Sorry for the duplicate bug report.
Anyway my stack trace differs from the one reported in #60164

*** This bug has been marked as a duplicate of 60164 ***

Comment 4

[Phil Schwartau]

Marek: thanks for the report. Marking VERIFIED - 


By coincidence, we are planning on releasing the JS1.5 RC3 tarball 
in a few days...