Closed Bug 858209 Opened 11 years ago Closed 11 years ago

Assertion failure: obj, at ./dist/include/js/Value.h:482 with OOM

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 840012

People

(Reporter: decoder, Unassigned)

Details

(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update]) 

The following testcase asserts on mozilla-central revision c232bec6974d (no options required):


var gTestcases = new Array();
var gTc = gTestcases.length;
function TestCase(n, d, e, a)
  gTestcases[gTc++] = this;
try {} catch(ex) {}
gcPreserveCode()
gcparam("maxBytes", gcparam("gcBytes") + 4*1024);
for ( CHARCODE = 0; CHARCODE < 256; CHARCODE++ )
  new TestCase();
This could be an old bug, but it would be nice to get it fixed since it triggers quite often.
Whiteboard: [jsbugmon:update,bisect]
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   95790:b863ef9946b8
user:        Luke Wagner
date:        Thu Feb 23 13:59:10 2012 -0800
summary:     Bug 659577 - Don't alias stack variables (r=bhackett)

This iteration took 80.333 seconds to run.
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
JSBugMon: The testcase found in this bug no longer reproduces (tried revision 25c2aaee8acc).
Whiteboard: [jsbugmon:update,ignore] → [jsbugmon:update,bisectfix]
Likely fixed by bug 840012.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Whiteboard: [jsbugmon:update,bisectfix] → [jsbugmon:update]
JSBugMon: Fix Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first good revision is:
changeset:   129087:64198b55d1ae
user:        Luke Wagner
date:        Wed Apr 17 08:50:54 2013 -0700
summary:     Bug 840012 - Handle OOM in CreateThisForFunction (r=hannes)

This iteration took 131.166 seconds to run.
You need to log in before you can comment on or make changes to this bug.