| JS1.5 RC4a | : | 2002-03-21 | |
| JS1.5 RC5 | : | 2003-01-10 |
MSVC users on Windows: compile the JS Engine with linker flag /OPT:NOICF !!!
Here's why
HIGHLIGHTS
Bug 96526
"JS code generator needs to eliminate tail recursion, avoid stack overflow"
The fix for this stopped JS from crashing on scripts with large branching (e.g. a 500-element if () else if () else if () else...
conditional)
Bugs Fixed between RC4a and RC5:
| ID | Sev | Pri | Plt | Owner | State | Result | Summary |
|---|---|---|---|---|---|---|---|
| 14044 | jsdtoa.c doesn't check for out-of-memory | ||||||
| 39954 | Math.random() always returns NaN | ||||||
| 58274 | toSource() method returns double byte function names inco... | ||||||
| 61314 | Makefile rules for "jsmath.o" and "jsmathtemp.o" cause st... | ||||||
| 62187 | JS shell producing too much console output on Mac | ||||||
| 65671 | JS (SpiderMonkey) Date() timezone problems on UNIX platforms | ||||||
| 67111 | JS_GetImplementationVersion() date string needs to be upd... | ||||||
| 76717 | regexp literals wrongly shared among threads executing pr... | ||||||
| 85267 | memory leak in jsdtoa.c | ||||||
| 96526 | JS code generator needs to eliminate tail recursion, avoi... | ||||||
| 103087 | The RegExps MarkupSPE, XML_SPE in the demo crash Mozilla | ||||||
| 112626 | String.split(regexp) crashes if regexp contains ()'s | ||||||
| 112974 | inheriting proto's map does not take into account JSCLASS... | ||||||
| 115911 | Difference from GMT is cached and doesn't refresh when ti... | ||||||
| 120992 | Decimal to string conversion very slow because of locking | ||||||
| 125411 | [NuBus] Mac installer crashes with a type 12 error (Sleep... | ||||||
| 128861 | pldhash: for the table at address 0x0x8aee608, the given ... | ||||||
| 129519 | JS_GetPropertyDesc gives up too easily | ||||||
| 130451 | [ECMA] Array.prototype.sort should not (re-)define .length | ||||||
| 130697 | Crash when repeatedly sorting a large array | ||||||
| 130970 | JS_Assert() during JS component registration (nsProgressD... | ||||||
| 131246 | Crash after out-of-memory in JS_NewContext() | ||||||
| 131348 | |var obj; for (item in obj) {}| causes error | ||||||
| 131510 | Crash when |arguments| defined as a variable inside function | ||||||
| 131964 | function declaration bug? delete on global function shoul... | ||||||
| 132088 | OOM in JS_ArenaAllocate generates assertion in js_GetDepe... | ||||||
| 132230 | str_unescape and js_str_escape in jsstr.c ignore OOM errors | ||||||
| 133773 | malign race to use and destroy runtime state in js_Destro... | ||||||
| 134202 | js_FinalizeStringRT needs to be fixed on 0.9.9 | ||||||
| 137000 | object member variables not set correctly from parameters... | ||||||
| 138666 | Another Memory Leak in jsdtoa.c | ||||||
| 139316 | Crash involving js_ReportIsNotDefined() | ||||||
| 140070 | JS_GetStringBytes returns the wrong string | ||||||
| 140164 | Assertion/Crash in JS_GetPrivate() called from nsXBLProto... | ||||||
| 140974 | JS constant folder over-eager with if (false) var x=42 | ||||||
| 141078 | Should JS support octal escape sequences in regexps? | ||||||
| 141356 | Add JS_[Un]LockGCThingRT() | ||||||
| 142232 | crash while opening this site | ||||||
| 142651 | jsstr.c's dollarStr static is just plain wrong | ||||||
| 143354 | IE6 is 10x faster than Mozilla on random Array.sort() | ||||||
| 143556 | JavaScript escape/unescape doesn't work properly with sur... | ||||||
| 144834 | mozilla crashes when loading page [@ js_Interpret] | ||||||
| 145493 | Assert in PR_Unlock (called from jsdtoa.c:1681) | ||||||
| 145779 | Function.prototype.apply.length should return 2 | ||||||
| 146210 | Need to expose JS_Now-alike via Date.now | ||||||
| 146596 | Crash in JavaScript when catch parameter "hidden" by var | ||||||
| 148171 | js_FinishDtoa() not called unless JS_THREADSAFE is set | ||||||
| 148800 | 'Illegal character' error | ||||||
| 148899 | addProperty failure leaves newly added property in object | ||||||
| 150584 | JavaScript syntax errors in HTML attributes are not repor... | ||||||
| 151066 | Crash calling 'Variables' in jsparse.c | ||||||
| 153170 | Popup-blocker stops legitimate popups | ||||||
| 154338 | garbage string (length 0x40008001) as argv[0] in array_join | ||||||
| 154737 | String(NaN) crashes JS Engine if JS_THREADSAFE is set | ||||||
| 155285 | Array.join(undefined) should use ',' | ||||||
| 155289 | String.prototype.XXX.length has some wrong values | ||||||
| 155291 | RegExp properties should be DontEnum | ||||||
| 156354 | Crash on propertyIsEnumerable() | ||||||
| 156355 | The [[Class]] property of the RegExp prototype | ||||||
| 157474 | Error.stack no longer quotes string arguments to functions | ||||||
| 157652 | Crash, possible heap corruption in JS Array.prototype.sort | ||||||
| 158382 | Large switch case jump extension bug | ||||||
| 160592 | Need to update js.mak, Makefile.ref, etc. for opt builds | ||||||
| 161542 | AIX: Optimizing jsatom.c causes Mozilla to fail on startup | ||||||
| 162779 | Ancient JS GC bug where multiple threads racing to GC may... | ||||||
| 164697 | RegExp object created by compiler may be wrong for execut... | ||||||
| 166420 | Objects with a toString method returning a String instanc... | ||||||
| 166743 | Error.prototype.stack is still causing headaches | ||||||
| 167325 | JS shell not giving an error on invalid call to default v... | ||||||
| 167658 | iteration through arguments hangs in endless loop | ||||||
| 167910 | enumeration of string characters fails; propertyIsEnumera... | ||||||
| 168302 | new profile, launch -mail, debug build, exits due to JS_A... | ||||||
| 168347 | JS decompiler: i++, i-- fail when |i| is a property of a ... | ||||||
| 169278 | tracking "patch to try that localizes rt->interruptHandle... | ||||||
| 169795 | Array.concat(function) doesn't add function (or anything ... | ||||||
| 170193 | adding a property after middle-delete of a function with ... | ||||||
| 172699 | JS UTF-8 decoder accepts overlong sequences | ||||||
| 173423 | js_NewDateObjectMsec re-defines date_methods! | ||||||
| 173827 | NSPR l10n_debug cruft copied into jsprf.c from old prprf.c | ||||||
| 174555 | JS_dtostr buffer overrun | ||||||
| 176125 | Page rendering shows "true" (or "false", or even blank) a... | ||||||
| 178389 | Overriding Function.prototype.toSource overrides Function... | ||||||
| 178722 | calling Array.sort() on an empty array returns undefined ... | ||||||
| 179524 | crash on opening web page started early in the 1.2 develo... | ||||||
| 186592 | nsXPCWrappedJS::Release - PR_Lock assertion. |
85 bugs fixed