Closed Bug 567068 Opened 14 years ago Closed 14 years ago

TM: "Assertion failure: status == ARECORD_COMPLETED || status == ARECORD_ABORTED || status == ARECORD_ERROR" with proxy

Categories

(Core :: JavaScript Engine, defect, P2)

defect

Tracking

()

RESOLVED FIXED
Tracking Status
blocking2.0 --- betaN+

People

(Reporter: jruderman, Assigned: gal)

References

Details

(Keywords: assertion, regression, testcase, Whiteboard: fixed-in-tracemonkey)

Attachments

(1 file)

With -j:

var prox = Proxy.create({has: function() { return false; }});
for (var j = 0; j < 2; ++j) { 'q' in prox; }

Assertion failure: status == ARECORD_COMPLETED || status == ARECORD_ABORTED || status == ARECORD_ERROR, at ../jstracer.cpp:7139

When the assertion fires, op is JSOP_IN, and status is ARECORD_STOP.
Attached patch patch (deleted) — Splinter Review
All hail proxies' might power to unearth existing bugs.
Assignee: general → gal
Attachment #446473 - Flags: review?(lw)
blocking2.0: --- → ?
OS: Mac OS X → All
Priority: -- → P2
Hardware: x86 → All
Thanks for telling me opcode jesse. I didn't even have to run the testcase to figure out what was wrong.
Comment on attachment 446473 [details] [diff] [review]
patch

Good one; this is older.
Attachment #446473 - Flags: review?(lw) → review+
http://hg.mozilla.org/tracemonkey/rev/1d52c3dfb311
Whiteboard: fixed-in-tracemonkey
http://hg.mozilla.org/mozilla-central/rev/1d52c3dfb311
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Depends on: 569384
blocking2.0: ? → betaN+
Bug in removed tracer code, setting in-testsuite- flag.
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: