Closed
Bug 756855
Opened 12 years ago
Closed 12 years ago
IonMonkey: Crash at weird location of 0x00000001005ead60 with testcase and --ion-eager
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: gkw, Assigned: dvander)
References
Details
(Keywords: crash, testcase)
Attachments
(2 files)
The attached testcase crashes js opt shell on IonMonkey changeset 890dd17b4187 with --ion-eager at a weird address.
The testcase is fragile, so attaching partially reduced.
|
Reporter | |
Comment 1•12 years ago
|
||
--ion-eager is needed, and this crash does not seem to reproduce in debug builds.
|
|
Assignee | |
Comment 2•12 years ago
|
||
Gary, could you retest this after the fix for bug 756659 lands? I think it's the same bug.
|
|
Assignee | |
Updated•12 years ago
|
Assignee: general → dvander
Status: NEW → ASSIGNED
|
|
Reporter | |
Comment 3•12 years ago
|
||
(In reply to David Anderson [:dvander] from comment #2)
> Gary, could you retest this after the fix for bug 756659 lands? I think it's
> the same bug.
Likely the same bug, seemingly no longer reproduces. -> FIXED
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
|
||
Updated•12 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•