Closed Bug 326453 Opened 17 years ago Closed 17 years ago

JS_Assertion while decompiling

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
normal

Tracking

()

VERIFIED FIXED
mozilla1.9alpha1

People

(Reporter: mrbkap, Assigned: brendan)

References

Details

(Keywords: assertion, verified1.8.0.2, verified1.8.1, Whiteboard: [rft-dl])

Attachments

(1 file)

I noticed this while testing something else:

Given:
function f() { with({})function g() { }; print(); }

Trying to call f.toString() gives:
Assertion failure: top < ss->printer->script->depth, at jsopcode.c:646

Brendan tracked this down and should have a patch.
Attached patch fixSplinter Review
Attachment #211171 - Flags: review?(mrbkap)
Blocks: js1.6rc1
Flags: blocking1.8.1+
Flags: blocking1.8.0.2?
Target Milestone: --- → mozilla1.9alpha
Status: NEW → ASSIGNED
OS: Linux → All
Priority: -- → P3
Hardware: PC → All
Attachment #211171 - Flags: review?(mrbkap) → review+
Fixed.

/be
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
OS: All → Linux
Priority: P3 → --
Hardware: All → PC
Resolution: --- → FIXED
Attachment #211171 - Flags: branch-1.8.1+
Attachment #211171 - Flags: approval1.8.0.2?
Checking in regress-326453.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-326453.js,v  <--  regress-326453.js
Flags: testcase+
Flags: blocking1.8.0.2? → blocking1.8.0.2+
Comment on attachment 211171 [details] [diff] [review]
fix

approved for 1.8.0 branch, a=dveditz for drivers
Attachment #211171 - Flags: approval1.8.0.2? → approval1.8.0.2+
Fixed on branches.

/be
Whiteboard: [rft-dl]
v ff 1.8.0.1/1.8/1.9 win/linux/mac 2006030[12]
Status: RESOLVED → VERIFIED
Keywords: fixed1.8.1
You need to log in before you can comment on or make changes to this bug.