Closed
Bug 1525329
Opened 10 months ago
Closed 10 months ago
Improve object/shape zone assertions
Categories
(Core :: JavaScript Engine, enhancement, P1)
Core
JavaScript Engine
P1
Tracking
()
RESOLVED
FIXED
mozilla67
Tracking | Status | |
---|---|---|
firefox67 | --- | fixed |
People
(Reporter: jandem, Assigned: jandem)
Details
Attachments
(1 file)
This came up today. In debug builds we should assert the shape/group is same-zone (shape) and same-compartment (group) with the object.
Assignee | ||
Updated•10 months ago
|
Flags: needinfo?(jdemooij)
Assignee | ||
Comment 1•10 months ago
|
||
Assignee | ||
Updated•10 months ago
|
Flags: needinfo?(jdemooij)
Updated•10 months ago
|
Priority: -- → P1
Pushed by jdemooij@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/a7b62563e1ee Add compartment/zone assertions to some JSObject/ShapedObject methods. r=jonco
Comment 3•10 months ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 10 months ago
status-firefox67:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla67
You need to log in
before you can comment on or make changes to this bug.
Description
•