Closed
Bug 1459454
Opened 7 years ago
Closed 7 years ago
Assertion failure: cx_->isExceptionPending(), at js/src/frontend/BytecodeCompiler.cpp:588
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1459258
People
(Reporter: gkw, Unassigned)
References
Details
(4 keywords, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
|
(deleted),
text/plain
|
Details |
The following testcase crashes on mozilla-central revision a91ca6e5ca82 (build with --enable-debug --enable-more-deterministic, run with --fuzzing-safe --no-threads --no-baseline --no-ion):
oomTest(function() {
z(g)
h["le"] = ''
d["c"]
s["ii"] = j(i in th)
g1
o("/" ({
l: ed,
f: 'ev',
l2,
e,
v: u
}))(t, "a")
})
Backtrace:
<no backtrace was available>
|
Reporter | |
Comment 1•7 years ago
|
||
|
|
Reporter | |
Comment 2•7 years ago
|
||
autobisectjs shows this is probably related to the following changeset:
The first bad revision is:
changeset: https://hg.mozilla.org/mozilla-central/rev/ce42829bf948
user: Jan de Mooij
date: Thu May 03 16:17:09 2018 +0200
summary: Bug 1458198 - Assert the frontend reported an exception if it fails to compile a script. r=jorendorff
Jan, is bug 1458198 a likely regressor?
Blocks: 1458198
Flags: needinfo?(jdemooij)
|
||
Comment 3•7 years ago
|
||
Likely a duplicate of bug 1459258.
|
||
Comment 4•7 years ago
|
||
Yes I have a patch for bug 1459258 that fixes this one too.
Status: NEW → RESOLVED
Closed: 7 years ago
Flags: needinfo?(jdemooij)
Resolution: --- → DUPLICATE
|
||
Updated•6 years ago
|
Keywords: regression
status-firefox62:
--- → fixed
You need to log in
before you can comment on or make changes to this bug.
Description
•