Closed
Bug 566806
Opened 15 years ago
Closed 15 years ago
scripted proxy traps don't guarantee that numeric ids are JSVAL_INT
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: gal)
References
Details
(Keywords: assertion, testcase, Whiteboard: fixed-in-tracemonkey)
Attachments
(1 file)
|
(deleted),
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
var x = Proxy.create({
get: function() {},
enumerateOwn: function() { return ['0']; }
});
JSON.stringify(x);
Assertion failure: js_CheckForStringIndex(ida->vector[n]) == ida->vector[n], at ../jsapi.cpp:3845
|
Reporter | |
Comment 1•15 years ago
|
||
Thread 0 Crashed:
0 JS_Assert + 93
1 JS_Enumerate + 129
2 __ZL2JOP9JSContextPlP16StringifyContext + 333
3 __ZL3StrP9JSContextlP8JSObjectP16StringifyContextPlb + 1233
4 js_Stringify + 478
5 js_json_stringify(JSContext*, unsigned int, long*) + 335
6 js_Interpret + 87318
7 js_Execute + 1247
8 JS_ExecuteScript + 54
9 __ZL7ProcessP9JSContextP8JSObjectPci + 1337
10 __ZL11ProcessArgsP9JSContextP8JSObjectPPci + 2283
11 main + 417 (js.cpp:5100)
12 _start + 209
13 start + 41
|
Assignee | |
Updated•15 years ago
|
Summary: Assertion with JSON.stringify on proxy → scripted proxy traps don't guarantee that numeric id's are JSVAL_INT
|
|
Assignee | |
Comment 2•15 years ago
|
||
Assignee: general → gal
|
|
Assignee | |
Updated•15 years ago
|
Attachment #446169 -
Flags: review?(brendan)
|
||
Updated•15 years ago
|
Attachment #446169 -
Flags: review?(brendan) → review+
|
|
Assignee | |
Comment 3•15 years ago
|
||
Whiteboard: fixed-in-tracemonkey
|
|
Assignee | |
Updated•15 years ago
|
Summary: scripted proxy traps don't guarantee that numeric id's are JSVAL_INT → scripted proxy traps don't guarantee that numeric ids are JSVAL_INT
|
||
Comment 4•15 years ago
|
||
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•