I'm seeing the same problem with the 4.4.3 ARM compiler. I only see the
problem in debug builds. I'm seeing the problem in B2G, and its 100%
reproducible.
The following JavaScript triggers the JS_ASSERT(mLength <= mReserved);
in the Vector<T,N,AP>::reserve(size_t request) function.
<pre>
28: function getSdkVersion() {
29: Cu.import("resource://gre/modules/ctypes.jsm");
30: try {
31: let cutils = ctypes.open("libcutils.so");
32: let cbuf = ctypes.char.array(4096)();
33: let c_property_get = cutils.declare("property_get", ctypes.default_abi,
34: ctypes.int, // return value:
length
35: ctypes.char.ptr, // key
36: ctypes.char.ptr, // value
37: ctypes.char.ptr); // default
38: let property_get = function (key, defaultValue) {
39: if (defaultValue === undefined) {
40: defaultValue = null;
41: }
42: c_property_get(key, cbuf, defaultValue);
43: return cbuf.readString();
44: }
45: return parseInt(property_get("ro.build.version.sdk"));
46: } catch(e) {
47: // Eat it. Hopefully we're on a non-Gonk system ...
48: //
49: // XXX we should check that
50: return 0;
51: }
52: }
</pre>
and the JSStack looks like:
<pre>
(gdb) call DumpJSStack()
0 getSdkVersion()
["jar:file:///system/b2g/omni.ja!/components/WifiWorker.js":37]
this = undefined
1 anonymous() ["jar:file:///system/b2g/omni.ja!/components/WifiWorker.js":54]
this = undefined
2 <TOP LEVEL> ["jar:file:///system/b2g/omni.ja!/components/WifiWorker.js":27]
this = [object BackstagePass @ 0x41b11200 (native @ 0x40a62fc4)]
</pre>
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/931637
Title:
Firefox 10.0.1 crashes when trying to enter a command on the Web
Console
To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/931637/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
