Closed Bug 933746 Opened 11 years ago Closed 11 years ago

GMail crash in JSObject::getPropertyNoGC(JSContext*, JSObject*, JSObject*, js::PropertyName*, JS::Value*)

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Version:
28 Branch
Platform:
x86
Windows 7
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED FIXED
Milestone:
mozilla28
Tracking Flags:
Tracking Status
firefox27 --- unaffected
firefox28 --- verified

People

(Reporter: ananuti, Unassigned)

References

Details

(Keywords: crash, Whiteboard: fixed by bug 933734)

Crash Data

This bug was filed from the Socorro interface and is report bp-bac3db65-7d1d-48ab-b8e6-e9db92131101. ============================================================= it happens when i open https://mail.google.com/mail/u/0/ First bad revision is mozilla-inbound revision 636620b3af0a Brian Hackett — Bug 930048 - Remove need to read objects directly when optimizing singleton accesses, r=jandem.
no longer crashes since mozilla-inbound changeset 6fd8199adc93
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Whiteboard: fixed by bug 933734
Target Milestone: --- → mozilla28
Keywords: verifyme
Status: RESOLVED → VERIFIED
status-firefox27: --- → unaffected
status-firefox28: --- → verified
Keywords: verifyme
You need to log in before you can comment on or make changes to this bug.