Closed Bug 624194 Opened 14 years ago Closed 9 years ago

proxy: OperationInProgress assert after double assignment to __proto__

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: igor, Unassigned)

Details

The following demonstrates the problem:

@watson~/m/tm/js/src> cat ~/s/y5.js
var a = {};
a.__proto__ = Proxy.create({has: function() { return true; }});
a.__proto__ = Proxy.create({has: function() { return true; }});

@watson~/m/tm/js/src> ~/b/js/tmdbg64/js ~/s/y5.js
Assertion failure: OperationInProgress(cx, proxy), at /home/igor/m/tm/js/src/jsproxy.cpp:487
Aborted
Assignee: general → nobody
No longer reproducible - resolving as WFM.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.