Closed Bug 735013 Opened 12 years ago Closed 12 years ago

JS OOM Testing: Assertion failure: types && types->hasScope(), at ../jsscriptinlines.h:216 or Crash [@ js::HeapPtr<js::GlobalObject, unsigned long>::operator]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 727341

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, crash, testcase)

Crash Data

Attachments

(1 file)

Log with failed allocations
81.31 KB, text/plain
Details 
The following command aborts/crashes on mozilla-central revision c6f26a8dcd08:

js -m -n -a -A 6115 -f js/src/jit-test/tests/jaeger/testShiftSameBacking.js


Attached is the log with backtraces of all failed allocations (as outputted when compiling with --enable-oom-backtrace and filtered through addr2line).
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
Blocks: 624094
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: