Closed
Bug 782869
Opened 12 years ago
Closed 12 years ago
IonMonkey: Crash during WebGL tests on Mochitest-1
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: dvander, Assigned: efaust)
References
()
Details
(Whiteboard: [ion:p1])
Attachments
(1 file)
8.78 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
PROCESS-CRASH | /tests/content/canvas/test/webgl/test_webgl_conformance_test_suite.html | application crashed (minidump found) Stack makes it look like some bogus pointer is being treated as a GC object. It's not clear what is causing this yet.
Reporter | ||
Updated•12 years ago
|
OS: Linux → All
Hardware: x86_64 → All
Assignee | ||
Comment 1•12 years ago
|
||
The problem was that visitCallDOMNative was generating jitcode that passed the address of a value containing a JSObject into a function that expected a HandleObject.
Reporter | ||
Updated•12 years ago
|
Attachment #652019 -
Flags: review?(dvander) → review+
Assignee | ||
Comment 2•12 years ago
|
||
https://hg.mozilla.org/projects/ionmonkey/rev/e7751b77a660
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•