Closed Bug 762500 Opened 12 years ago Closed 12 years ago

IonMonkey: Crash with glibc abort due to invalid pointer

Categories

(Core :: JavaScript Engine, defect)

Other Branch
x86
Linux
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 762547

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: crash, testcase, Whiteboard: [jsbugmon:update,ignore])

Attachments

(1 file)

Attached file Testcase for shell (deleted) —
The attached testcase crashes on ionmonkey revision 8acbac4d6cfd (run with --ion -n -m --ion-eager).
JSBugMon: The testcase found in this bug no longer reproduces (tried revision d64bb62ab69c).
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
Group: core-security
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: