Closed
Bug 674207
Opened 13 years ago
Closed 13 years ago
TM: Assertion failure: isNumber(), at jsvalue.h:604
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
mozilla8
People
(Reporter: decoder, Assigned: Waldo)
References
(Depends on 1 open bug)
Details
(Keywords: assertion, testcase, Whiteboard: js-triage-done)
Attachments
(1 file)
1.11 KB,
patch
|
luke
:
review+
|
Details | Diff | Splinter Review |
The following test asserts on mozilla-inbound revision 8160165dfcb4: unescape(it); Bisect shows: Changeset 71368:d2250fc608cc: bad The first bad revision is: changeset: 71368:d2250fc608cc user: Jeff Walden date: Fri Apr 01 15:24:21 2011 -0700 summary: Bug 646129 - [[DefaultValue]] on Date objects is wrong when called with no hint. r=luke Although this issue was found using a mutation of the "prop_iter_trace" test for coverage increase in 669864, I don't see a direct connection there. If I'm wrong there and this function is related, let me know.
Assignee | ||
Comment 1•13 years ago
|
||
This is fallout from a minor adjustment to how the convert hook works -- added an assertion that makes the problem clearer. I also went and updated JSClass.convert and JS_ConvertStub docs on MDN for this adjustment, while it was on the brain.
Updated•13 years ago
|
Attachment #548535 -
Flags: review?(luke) → review+
Assignee | ||
Comment 2•13 years ago
|
||
http://hg.mozilla.org/integration/mozilla-inbound/rev/a774533fbbf1 <3 being able to push and not have to watch the tree. :-) (This was tryservered, in my defense, if this blows up in my face for some reason.)
OS: Linux → All
Hardware: x86_64 → All
Whiteboard: js-triage-needed → js-triage-done
Target Milestone: --- → mozilla8
Comment 3•13 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/a774533fbbf1
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Reporter | ||
Comment 4•11 years ago
|
||
Automatically extracted testcase for this bug was committed: https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•