1827067 - Assertion failure: args[0].isObject(), at /root/SM/sm-latest/js/src/vm/SelfHosting.cpp:313

Status: RESOLVED DUPLICATE of bug 1827064

(Core :: JavaScript Engine, defect)

Description

[Tang]

Attachment: id:000008,sig:11,src:000276,op:python,pos:0

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:107.0) Gecko/20100101 Firefox/107.0

Steps to reproduce:

1. git clone --depth 1 https://github.com/mozilla/gecko-dev.git (commit is 008eb054013d699239993782a2835eb2115e21fc)
2. build it
3. path/to/js/.js test.js
   I attach the test.js below

Actual results:

Assertion failure: args[0].isObject(), at /root/SM/sm-latest/js/src/vm/SelfHosting.cpp:313
#01: ???[./js +0x354714]
#02: ???[./js +0xe5ab0b]
#03: ???[./js +0xe39aad]
#04: ???[./js +0xe117e6]
#05: ???[./js +0xe38a27]
#06: ???[./js +0xe40e58]
#07: ???[./js +0xef85f7]
#08: ???[./js +0xef9a4b]
#09: ???[./js +0xe5ab0b]
#10: ???[./js +0xe39aad]
#11: ???[./js +0xe3af1e]
#12: ???[./js +0x207d323]
#13: ???[./js +0x202f713]
#14: ???[./js +0x20630da]
#15: ???[./js +0xe3a0d1]
#16: ???[./js +0xe117e6]
#17: ???[./js +0xe38a27]
#18: ???[./js +0xe40e58]
#19: ???[./js +0x119203f]
#20: ???[./js +0xa1659b]
#21: ???[./js +0xa6f6e2]
#22: ???[./js +0xa7202b]
#23: ???[./js +0x99f00c]
#24: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x24083]
#25: ???[./js +0x9c0b7e]
#26: ??? (???:???)
Segmentation fault (core dumped)

Expected results:

success

Comment 1

[Jan de Mooij [:jandem]]

This is the same issue as bug 1827064.