Closed Bug 717690 Opened 13 years ago Closed 9 years ago

OOM Crash [@ js::HeapPtr<js::Shape, unsigned int>::operator js::Shape*()]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: decoder, Unassigned)

Details

(Keywords: crash, testcase, Whiteboard: js-triage-needed)

Crash Data

Attachments

(2 files)

shell testcase, unpack, chdir and run main.js with options "-n -m -a"
2.65 KB, application/x-compressed-tar
Details
[crash-signature] Machine-readable crash signature
597 bytes, text/plain
Details 
The attached test crashes on mozilla-central revision 4de07a341aab (options -m -n -a). Note that this test is 32 bit only and seems to depend on an OOM condition which will make the test fragile.
Assignee: general → nobody
Closing this ancient bug as it is most likely no longer valid.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: