Closed Bug 745819 Opened 12 years ago Closed 11 years ago

JS OOM Testing: Crash [@ js::ReentrancyGuard::ReentrancyGuard<js::Vector<js::mjit::TemporaryCopy> >]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: crash, testcase)

Crash Data

The following command crashes on mozilla-central revision fd06332733e5 (dbg build):

js -m -n -a -A 6721 -f js/src/jit-test/tests/pic/self1.js
Closing because the MethodJIT has been removed so this won't reproduce, anymore.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.