Loading http://qik.com/ triggers: Assertion failure: js_ReconstructStackDepth(cx, cx->fp->script, FI_SCRIPT_PC(fi, cx->fp)) == uintN(fi.s.spdist - cx->fp->script->nfixed), at /Users/jruderman/central/js/src/jstracer.cpp:2783

Bug 469309 involves the same assertion.

http://meetinbetween.us/ also triggers this assertion.

Jesse, can you help me reduce this bug? For the life of me I can't whip up a test case. It involves call and a side exit during the target function call. I have a patch but I can't get any of the sites to crash for me.

Loading http://maps.google.com/maps?file=api&v=2.x&key=ABQIAAAAVxoDynPWa2CEJXU6cuGlzRQgsGl9d1P7wz7wG-itpIZ-3OQO3hRuxapOgINKQqWLiem13V54tNU3mA is sufficient to trigger the assertion, so I think this affects any site that uses the Google Maps API. Working on a reduced testcase.

__noSuchMethod__ helped quite a bit!

I hit this every single time I try to create an event in Google Calendar. I've had to turn the JIT off to get work done.

This is caused by tracing apply/call. The problem is understood but I need brendan's patch to land and then I will try to fix it. Getting a test case would be very helpful. I still have not been able to create one for the shell.

I think this is about as much as I can reduce it.

also happens on Windows and Google Docs.

Testcase wfm in the shell.

WFM on tracemonkey branch. http://qik.com/ and http://meetinbetween.us/ do fine, and none of the shell testcases assert or crash.

Automatically extracted testcase for this bug was committed: https://hg.mozilla.org/mozilla-central/rev/efaf8960a929