Closed
Bug 882974
Opened 11 years ago
Closed 11 years ago
OdinMonkey: Crash [@ js::AsmJSModule::~AsmJSModule] or Assertion failure: hasScript(), at jsfun.h
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 678037
People
(Reporter: gkw, Assigned: h4writer)
References
Details
(4 keywords, Whiteboard: [jsbugmon:update])
Crash Data
Attachments
(1 file)
11.71 KB,
text/plain
|
Details |
((function(stdlib, foreign) { "use asm" var ff = foreign.ff function f() { ff() } return f })(this, { ff: Date.prototype.toLocaleString })) asserts js debug shell on mozilla-inbound changeset 56e47c35233e without any CLI arguments at Assertion failure: hasScript(), at jsfun.h and crashes js opt shell at js::AsmJSModule::~AsmJSModule This changeset contains the fix for bug 882514. Tested on a 32-bit shell with --enable-threadsafe and --enable-more-deterministic, though I'm not sure if these are needed. s-s because GC is on the stack.
Assignee | ||
Comment 1•11 years ago
|
||
Regression caused by bug 860838.
Assignee: general → hv1989
Blocks: 860838
Comment 2•11 years ago
|
||
And fixed by bug 678037 which causes the same condition to occur not just with natives, but with lazily-compiled scripts. (Test-case for that is already in the tree)
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Reporter | ||
Updated•11 years ago
|
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
Updated•9 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•