Last Comment Bug 743301 - Too-much-recursion crash with Date.prototype.toJSON
: Too-much-recursion crash with Date.prototype.toJSON
Status: VERIFIED FIXED
: assertion, regression, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: Trunk
: x86_64 Mac OS X
: -- critical (vote)
: ---
Assigned To: general
:
: Jason Orendorff [:jorendorff]
Mentors:
Depends on:
Blocks: jsfunfuzz 645468
  Show dependency treegraph
 
Reported: 2012-04-06 11:17 PDT by Jesse Ruderman
Modified: 2012-07-31 22:28 PDT (History)
5 users (show)
gary: in‑testsuite+
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments

Description Jesse Ruderman 2012-04-06 11:17:10 PDT
"" + {toString: Date.prototype.toJSON};

Crashes with too-much-recursion through _ZL11date_toJSONP9JSContextjPN2JS5ValueE

The first bad revision is:
changeset:   0906d9490eaf
user:        Jeff Walden
date:        Mon Mar 28 20:01:53 2011 -0700
summary:     Bug 645468 - Remove js_TryMethod: its semantics aren't what most of its users want, and its utility is limited.  r=luke
Comment 1 Gary Kwong [:gkw] [:nth10sd] 2012-04-06 15:15:35 PDT
There are lots of similar too-much-recursion crashes, Bug 715387, bug 717497, bug 721935 and bug 728722 spring to mind.

It would be nice if someone could look at these.
Comment 2 Gary Kwong [:gkw] [:nth10sd] 2012-07-31 22:27:55 PDT
Fix and test landed in bug 779215. -> RESOLVED / VERIFIED FIXED

Note You need to log in before you can comment on or make changes to this bug.