David Baron :dbaron: Reporter
	Description • 10 years ago

I just hit 
Assertion failure: aValue.isObject(), at /home/dbaron/builds/ssd/mozilla-central/mozilla/dom/bindings/BindingUtils.cpp:2476
while running a 64-bit Linux debug build of
https://hg.mozilla.org/mozilla-central/rev/b9e1856deef1 plus my patch queue as of
https://hg.mozilla.org/users/dbaron_mozilla.com/patches/rev/a40808b3382a
pushed up to the patch round-viewport-units.

Top of the stack is:

#6  0x00007fbf3f7b2798 in mozilla::dom::AssertReturnTypeMatchesJitinfo (
    aJitInfo=<optimized out>, aValue=...)
    at /home/dbaron/builds/ssd/mozilla-central/mozilla/dom/bindings/BindingUtils.cpp:2461
#7  0x00007fbf3f77ede4 in mozilla::dom::WindowBinding::genericCrossOriginGetter (cx=0x1321f30, argc=<optimized out>, vp=0x7fff54eda598)
    at /home/dbaron/builds/ssd/mozilla-central/obj/firefox-debugopt/dom/bindings/WindowBinding.cpp:11924

The getter being called is mozilla::dom::WindowBinding::get_top, and the return value is null.

Full gdb session attached.

I think the crash happened while I was closing the tab linked from http://www.sfgate.com/opinion/editorials/article/Chronicle-recommends-Carol-Kingsley-for-judge-5447040.php which linked to "Kimberly Williams".

	Boris Zbarsky [:bzbarsky]
	Comment 1 • 10 years ago

ms2ger just fixed this.