Closed Bug 2011895 Opened 5 months ago Closed 5 months ago

Assertion failure: input.options.lineno != 0 (Module cannot be compiled with lineNumber == 0), at firefox/js/src/frontend/BytecodeCompiler.cpp:1161

Categories

(Core :: JavaScript Engine, defect)

Firefox 149
defect

Tracking

()

RESOLVED DUPLICATE of bug 2011802

People

(Reporter: erge894, Unassigned)

Details

Attachments

(1 file)

135 bytes, application/x-javascript
Details
Attached file x.js

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:147.0) Gecko/20100101 Firefox/147.0

Steps to reproduce:

Build a debug JS shell, i used git commit 93aad2a6615f670b1279c229dd37f7397236131a, and run the attached sample with obj-debug-x86_64-pc-linux-gnu/dist/bin/js --fuzzing-safe x.js

const g = newGlobal({newCompartment: true});
const wrapper = Debugger().addDebuggee(g);
wrapper.createSource({text: ""}).reparse(true);

Actual results:

$ obj-debug-x86_64-pc-linux-gnu/dist/bin/js --fuzzing-safe x.js 
[34751] Assertion failure: input.options.lineno != 0 (Module cannot be compiled with lineNumber == 0), at /home/user/firefox/js/src/frontend/BytecodeCompiler.cpp:1161
#01: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x224b3d3]
#02: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x221bad8]
#03: JS::CompileModule(JSContext*, JS::ReadOnlyCompileOptions const&, JS::SourceText<char16_t>&)[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x310cc52]
#04: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2154538]
#05: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x216ca68]
#06: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2d251d5]
#07: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2d00896]
#08: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2d106d0]
#09: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2cfff0b]
#10: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2d02d71]
#11: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2d031cf]
#12: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2fb51d2]
#13: JS_ExecuteScript(JSContext*, JS::Handle<JSScript*>)[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x2fb53b4]
#14: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x1d5c23e]
#15: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x1d5b72a]
#16: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x1d1536d]
#17: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x1d0bfd7]
#18: ???[/lib/x86_64-linux-gnu/libc.so.6 +0x2a1ca]
#19: __libc_start_main[/lib/x86_64-linux-gnu/libc.so.6 +0x2a28b]
#20: ???[obj-debug-x86_64-pc-linux-gnu/dist/bin/js +0x1d00669]
#21: ??? (???:???)
Segmentation fault (core dumped)

Expected results:

Assertion should not be triggered

The Bugbug bot thinks this bug should belong to the 'Core::JavaScript Engine' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Component: Untriaged → JavaScript Engine
Product: Firefox → Core

Bryan, it looks like you just added support for reparsing as modules in bug 1605686. Can you take a look at this?

Flags: needinfo?(bthrall)
Status: UNCONFIRMED → RESOLVED
Closed: 5 months ago
Duplicate of bug: 2011802
Flags: needinfo?(bthrall)
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: