Closed
Bug 1257721
Opened 9 years ago
Closed 9 years ago
Shutdown-CC crash [@ nsDOMAttributeMap::GetSupportedNames] with Promise.reject
Categories
(Core :: DOM: Core & HTML, defect)
Core
DOM: Core & HTML
Tracking
()
RESOLVED
DUPLICATE
of bug 1257096
| Tracking | Status | |
|---|---|---|
| firefox48 | --- | affected |
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: crash, testcase)
Attachments
(2 files)
The testcase is similar to the one in bug 1257096, but the stack is different. Here we see js::ErrorReport::init calling js::ToString, whereas in the other bug it was calling IsDuckTypedErrorObject.
|
Reporter | |
Comment 1•9 years ago
|
||
|
||
Comment 2•9 years ago
|
||
I think my proposed fix for that bug would fix this too...
Depends on: 1257096
|
||
Comment 3•9 years ago
|
||
We can always undupe if this is incorrect.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
|
Assignee | |
Updated•6 years ago
|
Component: DOM → DOM: Core & HTML
You need to log in
before you can comment on or make changes to this bug.
Description
•