Closed Bug 714651 Opened 13 years ago Closed 13 years ago

Assertion failure: [infer failure] Missing type pushed 0: string, at jsinfer.cpp:349

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 714645

People

(Reporter: decoder, Unassigned)

Details

(Keywords: assertion, testcase, Whiteboard: js-triage-needed) 

The following test asserts on mozilla-central revision d98fbf3cbd71 (options -m -n):


function tryThis() {
  var sum = 4 ;
  var i = (/\u0080/ );
  while (sum < 10)
    try {
      i += 1;
    } finally {}
  return i;
}
actual = tryThis();



S-s due to previous infer failures being security-relevant.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Group: core-security
You need to log in before you can comment on or make changes to this bug.