Closed
Bug 649339
Opened 14 years ago
Closed 14 years ago
TI: Crash [@ js::types::GetValueType] or [@ js::types::TypeCompartment::dynamicAssign] or "Assertion failure: JSVAL_IS_DOUBLE_IMPL(data),"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 649261
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: crash, regression, testcase, Whiteboard: [ccbr])
Crash Data
Attachments
(1 file)
|
(deleted),
text/plain
|
Details |
e = z
z = /x/
try {
var z
} catch(e) {}
crashes js debug shell on JM changeset b442ad97a2fb with -m, -a, -d and -n at js::types::GetValueType and crashes js opt shell at js::types::TypeCompartment::dynamicAssign
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 64843:b442ad97a2fb
tag: tip
user: Brian Hackett
date: Mon Apr 11 20:10:46 2011 -0700
summary: [INFER] Direct global name accesses, bug 648994.
|
Reporter | |
Comment 1•14 years ago
|
||
__defineSetter__("eval", encodeURIComponent)
try {
eval = /x/,
x = /x/
} catch(e) {}
this similar testcase asserts at Assertion failure: JSVAL_IS_DOUBLE_IMPL(data), and seems to point at the same changeset. Try passing the testcase(s) in as CLI arguments if unable to reproduce.
Summary: TI: Crash [@ js::types::GetValueType] or [@ js::types::TypeCompartment::dynamicAssign] → TI: Crash [@ js::types::GetValueType] or [@ js::types::TypeCompartment::dynamicAssign] or "Assertion failure: JSVAL_IS_DOUBLE_IMPL(data),"
|
||
Comment 2•14 years ago
|
||
Actually, the first testcase dupes bug 649261 and the second testcase dupes bug 649272. Both bugs were introduced by rev b442ad97a2fb.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
|
||
Updated•14 years ago
|
Crash Signature: [@ js::types::GetValueType]
[@ js::types::TypeCompartment::dynamicAssign]
|
||
Comment 3•12 years ago
|
||
A testcase for this bug was already added in the original bug (bug 649261).
Flags: in-testsuite-
You need to log in
before you can comment on or make changes to this bug.
Description
•