Status: New
Owner: [email protected]
Labels: Type-Bug Priority-Critical
New issue 974 by [email protected]: Verify heap assertion found by
fuzzing
http://code.google.com/p/v8/issues/detail?id=974
Running the debug shell with the options
--expose-gc --verify-heap --debug-code
and the following code
eval("(function(){try { } catch(x) { } finally { gc() }})")()
hits an ASSERT in heap verification before the GC.
This one-liner should reproduce the error.
$ ./shell_g --expose-gc --verify-heap --debug-code
-e "eval('(function(){try { } catch(x) { } finally { gc() }})')()"
This is seen on r5973.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
