Closed
Bug 797476
Opened 13 years ago
Closed 13 years ago
"Assertion failure: addr % Cell::CellSize == 0,"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 797469
People
(Reporter: gkw, Unassigned)
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update] dupe of bug 797469)
(function() {
({
e: (schedulegc(3)),
l: eval(")")
})
})()
asserts js debug shell on m-c changeset e679d2e1d02d without any CLI arguments at Assertion failure: addr % Cell::CellSize == 0,
Asserts:
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012-10-03-mozilla-central-debug/jsshell-mac64.zip
Does not assert:
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012-10-02-mozilla-central-debug/jsshell-mac64.zip
Regression window:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=c9a8f55d8541&tochange=e679d2e1d02d
s-s because this assertion tends to be scary.
![]() |
Reporter | |
Comment 1•13 years ago
|
||
See bug 797469 but that testcase involves gczeal and evaluate but this one does not.
Based on the stack, this does look like a dupe of bug 797469.
Updated•13 years ago
|
Whiteboard: [jsbugmon:update] → [jsbugmon:update] dupe of bug 797469?
![]() |
Reporter | |
Comment 3•13 years ago
|
||
Indeed a dupe.
autoBisect shows this is probably related to the following changeset:
The first good revision is:
changeset: 109752:467aac9f380a
user: Eddy Bruel
date: Tue Oct 09 17:02:00 2012 +0200
summary: Bug 797469 - Avoid putting a JSFunction in Objectbox; r=jorendorff
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Whiteboard: [jsbugmon:update] dupe of bug 797469? → [jsbugmon:update] dupe of bug 797469
Updated•11 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•