Closed
Bug 477053
Opened 15 years ago
Closed 15 years ago
"Assertion failure: JSVAL_IS_STRING(v), at ../jsapi.h"
Categories
(Core :: JavaScript Engine, defect, P2)
Tracking
()
VERIFIED
FIXED
People
(Reporter: gkw, Assigned: mrbkap)
Details
(Keywords: assertion, testcase, verified1.9.1, Whiteboard: fixed-in-tracemonkey)
Attachments
(1 file)
932 bytes,
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
function f() { eval("with(arguments)throw <x/>;"); } f(); asserts debug (TM not needed) shell at Assertion failure: JSVAL_IS_STRING(v), at ../jsapi.h:111 but seems to work as expected in opt.
Flags: blocking1.9.1?
Reporter | ||
Comment 1•15 years ago
|
||
Nominated blocking1.9.1? because it suddenly kept on appearing in jsfunfuzz runs.
Assignee | ||
Comment 2•15 years ago
|
||
We're actually resolving the bogo jsid-turn-jsval JS_DEFAULT_XML_NAMESPACE_ID, but we could be resolving an object or a boolean (though the JSAPI, if no other way).
Updated•15 years ago
|
Attachment #360775 -
Flags: review?(brendan) → review+
Comment 3•15 years ago
|
||
Comment on attachment 360775 [details] [diff] [review] Easiest fix Sick. I hate E4X (and ES4 namespaces, which might have wanted object jsids too). Trying to think less dark thoughts, since we have some commitments to our embedders who use E4X. Plus, the http://wiki.ecmascript.org/doku.php?id=strawman:names wants something out of the int/string jsid space (don't mention pseudo-booleans! I did once but I think I got away with it! :-P). /be
Assignee | ||
Comment 4•15 years ago
|
||
http://hg.mozilla.org/tracemonkey/rev/b7d5afd33dcf
Whiteboard: fixed-in-tracemonkey
Updated•15 years ago
|
Flags: blocking1.9.1? → blocking1.9.1+
Priority: -- → P2
Comment 5•15 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/b7d5afd33dcf
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
Comment 6•15 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/db81c91e02ad
Flags: in-testsuite+
Flags: in-litmus-
Comment 7•15 years ago
|
||
http://hg.mozilla.org/releases/mozilla-1.9.1/rev/68ba5f887adb
Keywords: fixed1.9.1
Comment 8•15 years ago
|
||
v 1.9.1, 1.9.2
Status: RESOLVED → VERIFIED
Keywords: fixed1.9.1 → verified1.9.1
Comment 9•15 years ago
|
||
that was for e4x/Regress/regress-477053.js
You need to log in
before you can comment on or make changes to this bug.
Description
•