Closed
Bug 746366
Opened 13 years ago
Closed 13 years ago
IonMonkey: Crash [@ js::ion::MDefinition::isInitProp]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 746377
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: crash, testcase, Whiteboard: [jsbugmon:update,reconfirm,ignore])
Crash Data
The following testcase crashes on ionmonkey revision 67bf9a4a1f77 (run with --ion -n -m --ion-eager):
function check() {}
var obj2 = { __proto__: obj };
|
Reporter | |
Comment 1•13 years ago
|
||
JSBugMon: The testcase found in this bug no longer reproduces (tried revision de015aff650d).
|
|
Reporter | |
Updated•13 years ago
|
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
|
|
Reporter | |
Updated•13 years ago
|
Whiteboard: [jsbugmon:update,ignore] → [jsbugmon:update,reconfirm]
|
|
Reporter | |
Comment 2•13 years ago
|
||
JSBugMon: This bug has been automatically confirmed to be still valid (reproduced on revision bc1833f2111e).
|
|
Reporter | |
Updated•13 years ago
|
Whiteboard: [jsbugmon:update,reconfirm] → [jsbugmon:update,reconfirm,ignore]
|
||
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
|
|
Reporter | |
Comment 4•12 years ago
|
||
A testcase for this bug was already added in the original bug (bug 746377).
Flags: in-testsuite-
You need to log in
before you can comment on or make changes to this bug.
Description
•