Assertion [@ Decompile] with try/finally inside finally

VERIFIED FIXED in mozilla1.8.1

Status

()

defect
P1
critical
VERIFIED FIXED
13 years ago
8 years ago

People

(Reporter: jruderman, Assigned: brendan)

Tracking

(Blocks 1 bug, {crash, testcase})

Trunk
mozilla1.8.1
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

javascript:function() { try { } finally { try { } finally { } } }

Assertion failure: ss->top >= (uintN) ((jsatomid)(((pc)[1] << 8) | (pc)[2])), at /Users/admin/trunk/mozilla/js/src/jsopcode.c:1277
Blocks: 349611
Assignee: general → brendan
OS: Mac OS X 10.4 → All
Priority: -- → P1
Hardware: Macintosh → All
Target Milestone: --- → mozilla1.8.1
Status: NEW → ASSIGNED
Fixed by latest patch for bug 350312.

/be
Depends on: 350312
Fixed, right?
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Checking in regress-349592.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-349592.js,v  <--  regress-349592.js
initial revision: 1.1
Flags: in-testsuite+
verified fixed 1.9 20060831 windows/mac*/linux
Status: RESOLVED → VERIFIED
Crash Signature: [@ Decompile]
You need to log in before you can comment on or make changes to this bug.