Closed Bug 416404 Opened 17 years ago Closed 17 years ago

Assertion failure: !entry || entry->kpc == (PCVCAP_TAG(entry->vcap) ? (jsbytecode *) JSID_TO_ATOM(id) : cx->fp->pc)

Categories

(Core :: JavaScript Engine, defect, P1)

x86
All
defect

Tracking

()

VERIFIED FIXED
mozilla1.9beta4

People

(Reporter: bc, Assigned: brendan)

References

Details

(Keywords: crash, regression, testcase)

Attachments

(1 file)

ecma_3/ExecutionContexts/10.6.1-01.js js1_8/genexps/regress-349326.js Assertion failure: !entry || entry->kpc == (PCVCAP_TAG(entry->vcap) ? (jsbytecode *) JSID_TO_ATOM(id) : cx->fp->pc), at jsobj.c:3437
Flags: in-testsuite+
Flags: in-litmus-
Flags: blocking1.9?
Attached patch fix bogus assertion (deleted) — Splinter Review
Forgot to update this assertion when I added protopchit support. /be
Assignee: general → brendan
Status: NEW → ASSIGNED
Attachment #302197 - Flags: review?(shaver)
Attachment #302197 - Flags: approval1.9+
Comment on attachment 302197 [details] [diff] [review] fix bogus assertion r=shaver, sorry for missing during review!
Attachment #302197 - Flags: review?(shaver) → review+
I'm going to commit the fix quickly, since it's a DEBUG only change and I want to unbunch anyone like Bob who is suffering. /be
Flags: blocking1.9? → blocking1.9+
Priority: -- → P1
Target Milestone: --- → mozilla1.9beta4
Fixed: js/src/jsobj.c 3.425 /be
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
v
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: