Closed
Bug 583382
Opened 14 years ago
Closed 14 years ago
JM: jsreftest browser crash on js1_8_5/regress/regress-563221.js
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: dmandelin, Assigned: dmandelin)
References
Details
Attachments
(1 file)
|
(deleted),
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
It crashes because it resets a CALLPROP pic, but the reset code hardcodes ic::GetProp instead of using the right stub for the given pic kind.
Attachment #461693 -
Flags: review?(dvander)
|
||
Updated•14 years ago
|
Attachment #461693 -
Flags: review?(dvander) → review+
|
Assignee | |
Comment 1•14 years ago
|
||
|
|
Assignee | |
Updated•14 years ago
|
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•