854784
|
|
Trigger onerror when out of memory instead of crashing with OOM
|
Core
|
Graphics: ImageLib
|
nobody
|
NEW
|
---
|
2022-10-10
|
1394523
|
|
Assertion failure: templateObj->nonProxyIsExtensible(), at js/src/jscompartment.cpp:666 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2019-09-27
|
1406447
|
|
Assertion failure: false (BinarySearchIf(codeSegments_, 0, codeSegments_.length(), CodeSegmentPC(code.segment(t).base()), &index)), at js/src/wasm/WasmCompartment.cpp:132 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2021-10-26
|
1317329
|
|
Assertion failure: mir->resumePoint(), at js/src/jit/shared/CodeGenerator-shared.cpp:1353 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-11-22
|
1369773
|
|
Assertion failure: ionRecovery_.empty(), at js/src/vm/Stack.cpp:1436 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-11-23
|
1382434
|
|
Assertion failure: result.unwrapErr() == AbortReason::Error, at js/src/jit/IonBuilder.cpp:3795 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-10-29
|
1727291
|
|
Assertion failure: inited == hasPrototype(key), at vm/GlobalObject.h:334 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2023-03-01
|
762037
|
|
IonMonkey: Assertion failure: masm.framePushed() == 0, at ion/shared/CodeGenerator-x86-shared.cpp:111 with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2012-07-27
|
799178
|
|
Assertion failure: addr % Cell::CellSize == 0, at ../../gc/Heap.h:846 with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2014-05-05
|
806344
|
|
Assertion failure: isObject(), at ../../jsapi.h:490 with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-04-17
|
822223
|
|
Assertion failure: isObject(), at ../../jsapi.h:486 or Crash [@ js::gc::MarkKind] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-04-17
|
842988
|
|
BaselineCompiler: Opt-only Crash [@ ICStub] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-02-27
|
858209
|
|
Assertion failure: obj, at ./dist/include/js/Value.h:482 with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-04-17
|
877459
|
|
YARR Crash [@ ~Vector] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2014-04-07
|
877462
|
|
YARR Crash [@ JSC::Yarr::Parser<JSC::Yarr::YarrPatternConstructor, unsigned short>::parseCharacterClass] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2014-04-07
|
877525
|
|
Crash [@ PropertyAccess<(PropertyAccessKind)0>] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-06-21
|
914598
|
|
Crash [@ js::jit::ICFallbackStub::addNewStub] with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-12-11
|
936971
|
|
Assertion failure: !cx->isExceptionPending(), at ../jscntxtinlines.h:223 with OOM
|
Core
|
JavaScript Engine
|
general
|
RESO
|
DUPL
|
2013-12-06
|
1204721
|
|
Assertion failure: (*mode & PACKED_TAG_MASK) == 0 && (p.type & ~PACKED_TAG_MASK) == 0, at js/src/jit/Snapshots.cpp:353 with OOM
|
Core
|
JavaScript Engine
|
nicolas.b.pierron
|
RESO
|
DUPL
|
2016-11-02
|
1212278
|
|
Assertion failure: aIndex < mLength, at ../../dist/include/mozilla/Vector.h:438 with OOM
|
Core
|
JavaScript Engine
|
nicolas.b.pierron
|
RESO
|
DUPL
|
2016-11-02
|
1037685
|
|
Assertion failure: inited == !getPrototype(key).isUndefined(), at vm/GlobalObject.h:184 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2022-10-24
|
1109607
|
|
Crash [@ ScriptFromCalleeToken] or [@ js::Debugger::removeDebuggeeGlobal] or Assertion failure: hasScript(), with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2014-12-10
|
1164532
|
|
Assertion failure: !isInList(), at js/src/jsweakmap.cpp:42 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2015-05-19
|
1188296
|
|
Crash [@ js::jit::IonBuilder::replaceTypeSet] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2021-10-26
|
1188301
|
|
Crash [@ js::jit::MBasicBlock::insertAfter] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2021-10-26
|
1204849
|
|
Assertion failure: parseTask, at js/src/vm/HelperThreads.cpp:916 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2015-09-15
|
1209943
|
|
Assertion failure: !hasUncompiledScript(), at js/src/shell/../jsfun.h:422 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2015-10-02
|
1211009
|
|
Crash [@ NonBuiltinFrameIter] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2015-10-05
|
1212094
|
|
Crash [@ SetGCCallback] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-07-26
|
1263874
|
|
Assertion failure: !cx->asJSContext()->isExceptionPending(), at js/src/frontend/BytecodeCompiler.cpp:565 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-04-19
|
1268309
|
|
Assertion failure: !lookup(l).found(), at dist/include/js/HashTable.h:1733 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-04-29
|
1269756
|
|
Assertion failure: tagCount > 0, at js/src/jit/CodeGenerator.cpp:531 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-05-23
|
1269759
|
|
Assertion failure: rt->gc.nursery.isEmpty(), at js/src/jsgcinlines.h:198 or Assertion failure: zone->runtimeFromAnyThread()->gc.nursery.isEmpty(), at js/src/jsgcinlines.h:197 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-05-13
|
1278193
|
|
Assertion failure: (((report->flags) & 0x1) != 0), at js/src/shell/js.cpp:5984 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-06-09
|
1284485
|
|
Assertion failure: hasScript(), at js/src/jsfun.h:456 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-07-07
|
1297142
|
|
Assertion failure: callee_saved_value == get_register(r4), at js/src/jit/arm/Simulator-arm.cpp:4695 or Crash [@ js::gc::IsInsideNursery] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2021-10-26
|
1299103
|
|
Assertion failure: cx_->runtime()->profilingActivation_ == this, at js/src/vm/Stack.cpp:1685 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2019-03-24
|
1299106
|
|
Crash [@ js::Sprinter::checkInvariants] or Crash [@ js::Sprinter::putString] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-09-07
|
1299115
|
|
Crash [@ std::__atomic_base<unsigned int>::load] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2017-06-13
|
1302411
|
|
Assertion failure: id == prev, at js/src/vm/TraceLogging.cpp:547 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2016-09-15
|
1367526
|
|
Assertion failure: CurrentThreadCanAccessZone(zone), at js/src/gc/Heap.h:1297 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2020-08-08
|
1368577
|
|
Assertion failure: !cycleEnd_, at js/src/jit/MoveResolver.h:285 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-11-27
|
1390861
|
|
Crash [@ js::jit::JitFrameIterator::operator++] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2020-08-08
|
1459244
|
|
Assertion failure: task->outOfMemory || task->overRecursed || !task->errors.empty(), at frontend/BytecodeCompiler.cpp:595 or Assertion failure: false (Expected script), at vm/HelperThreads.cpp:1672 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-05-07
|
1491337
|
|
Assertion failure: !JS_IsExceptionPending(cx), at js/src/jsexn.h:130 with OOM
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
DUPL
|
2018-11-01
|
1240736
|
|
Assertion failure: zone->runtimeFromAnyThread()->isHeapBusy(), at js/src/jsgcinlines.h:248 with OOM
|
Core
|
JavaScript Engine
|
terrence.d.cole
|
RESO
|
DUPL
|
2016-04-13
|