Closed
Bug 914586
Opened 11 years ago
Closed 11 years ago
Crash [@ IsCacheableSetPropCallNative]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 913716
People
(Reporter: decoder, Unassigned)
Details
(Keywords: crash, testcase, Whiteboard: [jsbugmon:update])
Crash Data
Attachments
(1 file)
|
(deleted),
text/plain
|
Details |
The following testcase crashes on mozilla-central revision be1053dc223b (run with --ion-eager):
Object.defineProperty(this, "x", { set: undefined });
evaluate("var x = -0.1;");
|
Reporter | |
Comment 1•11 years ago
|
||
|
|
Reporter | |
Updated•11 years ago
|
Whiteboard: [jsbugmon:update,bisect]
|
|
Reporter | |
Updated•11 years ago
|
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
|
|
Reporter | |
Comment 2•11 years ago
|
||
JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: http://hg.mozilla.org/mozilla-central/rev/6f82c0e76f2d
user: Eric Faust
date: Fri Aug 30 18:50:36 2013 -0700
summary: Bug 904827 - Part 2: Implement JSNative setter calls in SetPropertyIC. (r=djvj)
This iteration took 1.279 seconds to run.
|
|
Reporter | |
Comment 3•11 years ago
|
||
Needinfo from Eric, based on comment 2 :)
Flags: needinfo?(efaustbmo)
|
||
Comment 4•11 years ago
|
||
Found by Gary and originally filed as 913716. Fix up there.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(efaustbmo)
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•