| JS1.5 RC4a | : | 2002-03-21 | |
| JS1.5 RC5 | : | 2003-01-10 |
Bug 96526
"JS code generator needs to eliminate tail recursion, avoid stack overflow"
The fix for this stopped JS from crashing on scripts with large branching (e.g. a 500-element if () else if () else if () else...
conditional)
| ID | Sev | Pri | Plt | Owner | State | Result | Summary |
|---|---|---|---|---|---|---|---|
| 14044 | jsdtoa.c doesn't check for out-of-memory | ||||||
| 39954 | Math.random() always returns NaN | ||||||
| 58274 | toSource() method returns double byte function names inco... | ||||||
| 61314 | Makefile rules for "jsmath.o" and "jsmathtemp.o" cause st... | ||||||
| 62187 | JS shell producing too much console output on Mac | ||||||
| 65671 | JS (SpiderMonkey) Date() timezone problems on UNIX platforms | ||||||
| 67111 | JS_GetImplementationVersion() date string needs to be upd... | ||||||
| 76717 | regexp literals wrongly shared among threads executing pr... | ||||||
| 85267 | memory leak in jsdtoa.c | ||||||
| 96526 | JS code generator needs to eliminate tail recursion, avoi... | ||||||
| 103087 | The RegExps MarkupSPE, XML_SPE in the demo crash Mozilla | ||||||
| 112626 | String.split(regexp) crashes if regexp contains ()'s | ||||||
| 112974 | inheriting proto's map does not take into account JSCLASS... | ||||||
| 115911 | Difference from GMT is cached and doesn't refresh when ti... | ||||||
| 120992 | Decimal to string conversion very slow because of locking | ||||||
| 125411 | [NuBus] Mac installer crashes with a type 12 error (Sleep... | ||||||
| 128861 | pldhash: for the table at address 0x0x8aee608, the given ... | ||||||
| 129519 | JS_GetPropertyDesc gives up too easily | ||||||
| 130451 | [ECMA] Array.prototype.sort should not (re-)define .length | ||||||
| 130697 | Crash when repeatedly sorting a large array | ||||||
| 130970 | JS_Assert() during JS component registration (nsProgressD... | ||||||
| 131246 | Crash after out-of-memory in JS_NewContext() | ||||||
| 131348 | |var obj; for (item in obj) {}| causes error | ||||||
| 131510 | Crash when |arguments| defined as a variable inside function | ||||||
| 131964 | function declaration bug? delete on global function shoul... | ||||||
| 132088 | OOM in JS_ArenaAllocate generates assertion in js_GetDepe... | ||||||
| 132230 | str_unescape and js_str_escape in jsstr.c ignore OOM errors | ||||||
| 133773 | malign race to use and destroy runtime state in js_Destro... | ||||||
| 134202 | js_FinalizeStringRT needs to be fixed on 0.9.9 | ||||||
| 137000 | object member variables not set correctly from parameters... | ||||||
| 138666 | Another Memory Leak in jsdtoa.c | ||||||
| 139316 | Crash involving js_ReportIsNotDefined() | ||||||
| 140070 | JS_GetStringBytes returns the wrong string | ||||||
| 140164 | Assertion/Crash in JS_GetPrivate() called from nsXBLProto... | ||||||
| 140974 | JS constant folder over-eager with if (false) var x=42 | ||||||
| 141078 | Should JS support octal escape sequences in regexps? | ||||||
| 141356 | Add JS_[Un]LockGCThingRT() | ||||||
| 142232 | crash while opening this site | ||||||
| 142651 | jsstr.c's dollarStr static is just plain wrong | ||||||
| 143354 | IE6 is 10x faster than Mozilla on random Array.sort() | ||||||
| 143556 | JavaScript escape/unescape doesn't work properly with sur... | ||||||
| 144834 | mozilla crashes when loading page [@ js_Interpret] | ||||||
| 145493 | Assert in PR_Unlock (called from jsdtoa.c:1681) | ||||||
| 145779 | Function.prototype.apply.length should return 2 | ||||||
| 146210 | Need to expose JS_Now-alike via Date.now | ||||||
| 146596 | Crash in JavaScript when catch parameter "hidden" by var | ||||||
| 148171 | js_FinishDtoa() not called unless JS_THREADSAFE is set | ||||||
| 148800 | 'Illegal character' error | ||||||
| 148899 | addProperty failure leaves newly added property in object | ||||||
| 150584 | JavaScript syntax errors in HTML attributes are not repor... | ||||||
| 151066 | Crash calling 'Variables' in jsparse.c | ||||||
| 153170 | Popup-blocker stops legitimate popups | ||||||
| 154338 | garbage string (length 0x40008001) as argv[0] in array_join | ||||||
| 154737 | String(NaN) crashes JS Engine if JS_THREADSAFE is set | ||||||
| 155285 | Array.join(undefined) should use ',' | ||||||
| 155289 | String.prototype.XXX.length has some wrong values | ||||||
| 155291 | RegExp properties should be DontEnum | ||||||
| 156354 | Crash on propertyIsEnumerable() | ||||||
| 156355 | The [[Class]] property of the RegExp prototype | ||||||
| 157474 | Error.stack no longer quotes string arguments to functions | ||||||
| 157652 | Crash, possible heap corruption in JS Array.prototype.sort | ||||||
| 158382 | Large switch case jump extension bug | ||||||
| 160592 | Need to update js.mak, Makefile.ref, etc. for opt builds | ||||||
| 161542 | AIX: Optimizing jsatom.c causes Mozilla to fail on startup | ||||||
| 162779 | Ancient JS GC bug where multiple threads racing to GC may... | ||||||
| 164697 | RegExp object created by compiler may be wrong for execut... | ||||||
| 166420 | Objects with a toString method returning a String instanc... | ||||||
| 166743 | Error.prototype.stack is still causing headaches | ||||||
| 167325 | JS shell not giving an error on invalid call to default v... | ||||||
| 167658 | iteration through arguments hangs in endless loop | ||||||
| 167910 | enumeration of string characters fails; propertyIsEnumera... | ||||||
| 168302 | new profile, launch -mail, debug build, exits due to JS_A... | ||||||
| 168347 | JS decompiler: i++, i-- fail when |i| is a property of a ... | ||||||
| 169278 | tracking "patch to try that localizes rt->interruptHandle... | ||||||
| 169795 | Array.concat(function) doesn't add function (or anything ... | ||||||
| 170193 | adding a property after middle-delete of a function with ... | ||||||
| 172699 | JS UTF-8 decoder accepts overlong sequences | ||||||
| 173423 | js_NewDateObjectMsec re-defines date_methods! | ||||||
| 173827 | NSPR l10n_debug cruft copied into jsprf.c from old prprf.c | ||||||
| 174555 | JS_dtostr buffer overrun | ||||||
| 176125 | Page rendering shows "true" (or "false", or even blank) a... | ||||||
| 178389 | Overriding Function.prototype.toSource overrides Function... | ||||||
| 178722 | calling Array.sort() on an empty array returns undefined ... | ||||||
| 179524 | crash on opening web page started early in the 1.2 develo... | ||||||
| 186592 | nsXPCWrappedJS::Release - PR_Lock assertion. |