1078960 - Assertion failure entry_ == makeIndex(clasp, key, kind)

Status: RESOLVED WORKSFORME

(Core :: JavaScript: GC, defect)

Description

[Terrence Cole [:terrence]]

khuey has an android testcase that reliably hits this assertion[1]. I was not able to figure out what could be going off the rails with a few minutes of poking. The stack is at [2].

1- http://mxr.mozilla.org/mozilla-central/source/js/src/vm/Runtime.h?force=1#334
2- https://khuey.pastebin.mozilla.org/6726143

Comment 1

[Terrence Cole [:terrence]]

Jon, could you take a look?

Comment 2

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

Attachment: minidump

That pastebin is probably only good for 24 hours.

Comment 3

[Jon Coppeard (:jonco)]

Probably a duplicate of bug 1075546, which is waiting for sec-approval to land.

Comment 4

[Terrence Cole [:terrence]]

(In reply to Kyle Huey [:khuey] ([e-mail]) from comment #2)
> Created attachment 8500783 [details]
> minidump
> 
> That pastebin is probably only good for 24 hours.

Pastebin was down when I filed last night, so wasn't able to up the limit. Things seem to be fixed now though:

https://pastebin.mozilla.org/6735990

Comment 5

[Terrence Cole [:terrence]]

Was this fixed by bug 1075546?

Comment 6

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

I can't reproduce this after updating to trunk.