Closed
Bug 458375
Opened 16 years ago
Closed 12 years ago
GetScopeChain from resolve hook leads to crash
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: jorendorff, Unassigned)
Details
See bug 454343 comment 5 (and 8). js_FindPropertyHelper assumes (and asserts) that resolve hooks can't change cx->fp->scopeChain, but GetScopeChain can do that.
Comment 1•12 years ago
|
||
GetScopeChain was removed.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•