Closed
Bug 635531
Opened 14 years ago
Closed 9 years ago
Crash [@ js::Shape::hasSetterValue] NULL pointer dereference with watchpoints, setters
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
| Tracking | Status | |
|---|---|---|
| status1.9.2 | --- | unaffected |
People
(Reporter: jandem, Assigned: jorendorff)
References
Details
(4 keywords, Whiteboard: [sg:dos])
Crash Data
Attachments
(2 files)
Attached testcase crashes in debug and release builds.
|
Reporter | |
Updated•14 years ago
|
Summary: NULL-ptr dereference with watchpoints, setters → NULL pointer dereference with watchpoints, setters
|
|
Reporter | |
Comment 1•14 years ago
|
||
Looks like some shape pointer is NULL.
|
|
Reporter | |
Comment 2•14 years ago
|
||
The first bad revision is:
changeset: 62175:589bb166be02
user: Jason Orendorff <jorendorff@mozilla.com>
date: Tue Feb 08 16:09:33 2011 -0600
summary: Bug 627984 - Tighten up assertions in JSObject::methodReadBarrier. r=brendan.
Blocks: 627984
Keywords: regression
|
||
Updated•14 years ago
|
Assignee: general → jorendorff
|
|
||
Updated•14 years ago
|
Whiteboard: [sg:dos]
|
||
Updated•14 years ago
|
Summary: NULL pointer dereference with watchpoints, setters → Crash [@ js::Shape::hasSetterValue] NULL pointer dereference with watchpoints, setters
Version: unspecified → Trunk
|
||
Updated•13 years ago
|
Crash Signature: [@ js::Shape::hasSetterValue]
|
||
Comment 3•13 years ago
|
||
any reason to keep this closed if it is sg:dos?
|
||
Updated•13 years ago
|
Group: core-security
status1.9.2:
--- → unaffected
WFM as of m-c rev e537a1ba501b.
Status: NEW → RESOLVED
Closed: 9 years ago
Flags: in-testsuite?
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•