Closed Bug 714651 Opened 8 years ago Closed 8 years ago

Assertion failure: [infer failure] Missing type pushed 0: string, at jsinfer.cpp:349

Categories

(Core :: JavaScript Engine, defect, critical)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 714645

People

(Reporter: decoder, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase, Whiteboard: js-triage-needed)

The following test asserts on mozilla-central revision d98fbf3cbd71 (options -m -n):


function tryThis() {
  var sum = 4 ;
  var i = (/\u0080/ );
  while (sum < 10)
    try {
      i += 1;
    } finally {}
  return i;
}
actual = tryThis();



S-s due to previous infer failures being security-relevant.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 714645
Group: core-security
You need to log in before you can comment on or make changes to this bug.