Closed
Bug 464381
Opened 16 years ago
Closed 16 years ago
Crash during Topsite Test [@ js_ExecuteTree(JSContext*, nanojit::Fragment*, unsigned int&, VMSideExit**) + 3342 (jstracer.cpp:3494)]
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
DUPLICATE
of bug 457065
People
(Reporter: cbook, Unassigned)
References
()
Details
(Keywords: crash)
Crash Data
Attachments
(1 file)
|
(deleted),
text/plain
|
Details |
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1b2pre) Gecko/20081111 Firefox/3.1b2pre
Found during the automated Global 500 Topsite Tests.
Steps to reproduce:
-> Load http://cgi.ebay.de/ws/eBayISAPI.dll?ViewItem&Item=230300747535&Category=66406
-> Wait till the site has loaded completely
--> Crash
also reproduced with a Windows XP 1.9.1 Debug Build
Fatal Assertion before the Crash (the Assertion is handled in Bug 457065):
Assertion failure: !fp->callee || fp->thisp == JSVAL_TO_OBJECT(fp->argv[-1]), at /work/mozilla/builds/1.9.1/mozilla/js/src/jstracer.cpp:3496
Trace/BPT trap
Flags: blocking1.9.1?
|
Reporter | |
Updated•16 years ago
|
Status: NEW → RESOLVED
Closed: 16 years ago
Flags: blocking1.9.1?
Resolution: --- → DUPLICATE
|
|
Reporter | |
Updated•16 years ago
|
Blocks: sisyphus-tracking
No longer depends on: sisyphus-tracking
|
||
Updated•13 years ago
|
Crash Signature: [@ js_ExecuteTree(JSContext*, nanojit::Fragment*, unsigned int&, VMSideExit**) + 3342 (jstracer.cpp:3494)]
You need to log in
before you can comment on or make changes to this bug.
Description
•