Closed
Bug 957412
Opened 11 years ago
Closed 11 years ago
GenerationalGC: Assertion failure: pos == wholeChars + wholeLength, at vm/String.cpp:343
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 950927
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase, Whiteboard: [jsbugmon:ignore])
The following testcase asserts on mozilla-central built with --enable-exact-rooting --enable-gcgenerational, revision 325c74addeba (run with --fuzzing-safe --ion-eager):
var lfcode = new Array();
var egc = 14;
gczeal(7,egc);
lfcode.push("var S = new Array();\
var item = 0;\
var limit = 0x0061;\
for ( var i = 0x007A; i >= limit; i-- ) {\
S[item] += \"\\'\"+ String.fromCharCode(i) +\"\\'\" ;\
if ( i > limit )\
S[item] += \",\";\
}\
for ( var i = 0; i < S.length; i++ )\
CheckItems( S[i] );\
function CheckItems( S ) {\
eval( S );\
function Sort( a ) {}\
function Compare( x, y ) {}\
}\
");
var lfVarx = lfcode.shift();
if (lfVarx.length != 1) {
eval("(function() { " + lfVarx + " })();");
}
|
Reporter | |
Comment 1•11 years ago
|
||
The test here is similar to some other bugs that we have on file already, but I wasn't sure if this is a dup.
|
||
Comment 2•11 years ago
|
||
Yes, it's a dup of bug 950927.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•