Crash [@ strlen] or [@ PopOffPrec] or "Assertion failure: ss->printer->pcstack,"

RESOLVED DUPLICATE of bug 716713

Status

()

--
critical
RESOLVED DUPLICATE of bug 716713
7 years ago
4 years ago

People

(Reporter: gkw, Unassigned)

Tracking

(Blocks: 1 bug, 4 keywords)

Trunk
x86
Mac OS X
assertion, crash, regression, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: js-triage-needed, crash signature)

Attachments

(1 attachment)

Created attachment 587192 [details]
stack

(function() {
    switch ('') {
    case (( * )()):
    }
}).g()

asserts js debug shell on m-c changeset c713003d3226 without any CLI arguments at Assertion failure: ss->printer->pcstack, and crashes js opt shell at strlen, and with PopOffPrec somewhere on the stack too.

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   84036:7ab4f1ebc7cc
user:        Brian Hackett
date:        Mon Jan 09 06:29:50 2012 -0800
summary:     Backout 54cd89b0f1fa (bug 712714 backout).  Talos will probably report fake regressions for this patch, do not back out for this reason.

s-s because the testcase tries to access memory address 0x40977460.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 716713
Group: core-security
You need to log in before you can comment on or make changes to this bug.