Closed
Bug 744287
Opened 14 years ago
Closed 14 years ago
Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(*thingp)), at jsgc.cpp:4278
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 744285
People
(Reporter: decoder, Assigned: billm)
Details
(Keywords: assertion, testcase)
The following test asserts on mozilla-central revision 3fa30b0edd15 (options -m -n):
function callbackfn(v) {
gczeal(4);
return arr[0] + (Uint8ClampedArray);
}
arr = [1,2,3,4,5];
arr = arr.map(callbackfn);
Unlikely to be a dup of the two existing bugs because this testcase is so short/simple compared to the others. Marking s-s because this assertion is GC-related.
|
Assignee | |
Updated•14 years ago
|
Group: core-security
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
|
Reporter | |
Comment 2•13 years ago
|
||
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug744287.js.
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•