Status: Accepted
Owner: [email protected]
Labels: Type-Bug Priority-Medium
New issue 1928 by [email protected]: Large array OOM crash
http://code.google.com/p/v8/issues/detail?id=1928
<script>
var oCanvas = document.createElement("CANVAS");/*js_om2*/
var oContext2d=oCanvas.getContext("2d");/*js_om2*/
oContext2d.getImageData(0, 0, 1, 0x8000000);
oContext2d.getImageData(0, 0, 1, 0x8000000);
oContext2d.getImageData(0, 0, 1, 0x8000000);
</script>
I would expect V8 to be able to handle OOM more gracefully and throw an
exception.
Also, since the first two objects are not referenced in a variable, should
garbage collection not be able to free them and prevent OOM?
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
