Closed Bug 309850 Opened 19 years ago Closed 19 years ago

E4x - JS_ASSERT @ js_Interpret, line 1814

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: bc, Unassigned)

Details

(Keywords: regression) 

This assert began sometime after 9/11 in debug builds on branch and trunk on at
least winxp. It was reproduced today with a 2005092311 trunk build.

e4x/Expressions/11.2.2.js
e4x/Expressions/11.2.4.js
e4x/XML/13.4.4.4.js
e4x/XML/13.4.4.7.js

	depth	0x00000007
+	fp->sp	0x0041d9f0
+	fp->spbase	0x0041d9dc
+	sp	0x0041d9f0


NTDLL! 7c901230()
js_Interpret(JSContext * 0x000371b8, unsigned char * 0x0042540d, long *
0x0013ed38) line 1814 + 39 bytes
js_FilterXMLList(JSContext * 0x000371b8, JSObject * 0x00039b50, unsigned char *
0x0042540d, long * 0x0013ed38) line 7855 + 17 bytes
js_Interpret(JSContext * 0x000371b8, unsigned char * 0x0042540a, long *
0x0013ee24) line 5067 + 36 bytes
js_Execute(JSContext * 0x000371b8, JSObject * 0x000387c8, JSScript * 0x004251f0,
JSStackFrame * 0x00000000, unsigned int 0x00000000, long * 0x0013fecc) line 1393
+ 19 bytes
JS_ExecuteScript(JSContext * 0x000371b8, JSObject * 0x000387c8, JSScript *
0x004251f0, long * 0x0013fecc) line 3842 + 25 bytes
Process(JSContext * 0x000371b8, JSObject * 0x000387c8, char * 0x00032d56) line
223 + 22 bytes
ProcessArgs(JSContext * 0x000371b8, JSObject * 0x000387c8, char * * 0x00032cc4,
int 0x00000006) line 426 + 23 bytes
main(int 0x00000006, char * * 0x00032cc4, char * * 0x00033188) line 2552 + 21 bytes
JS! mainCRTStartup + 227 bytes
KERNEL32! 7c816d4f()
Keywords: regression
Bogus assertion, sorry.  Fixed on trunk and branch (DEBUG only, no need for
release-built code changes).

/be
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → FIXED
Flags: testcase-
You need to log in before you can comment on or make changes to this bug.