Closed
Bug 352208
Opened 18 years ago
Closed 18 years ago
"Assertion failure: ts->lookahead == 0 || ON_CURRENT_LINE(ts, CURRENT_TOKEN(ts).pos) || ts->tokens[(ts->cursor + ts->lookahead) & NTOKENS_MASK].type == TOK_EOL" [@ js_PeekTokenSameLine]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: brendan)
Details
(Keywords: crash, testcase, verified1.8.1)
Crash Data
Attachments
(2 files)
|
800 bytes,
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
|
1010 bytes,
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
js> new Function("setter/*\n");
Assertion failure: ts->lookahead == 0 || ON_CURRENT_LINE(ts, CURRENT_TOKEN(ts).pos) || ts->tokens[(ts->cursor + ts->lookahead) & NTOKENS_MASK].type == TOK_EOL, at jsscan.c:1017
#0 0x0000a370 in JS_Assert
#1 0x00080e64 in js_PeekTokenSameLine (cx=0x500180, ts=0x1814a10) at jsscan.c:1014
#2 0x000d3ce8 in CheckGetterOrSetter (cx=0x500180, ts=0x1814a10, tt=TOK_FUNCTION) at jsparse.c:349
#3 0x000e2038 in PrimaryExpr (cx=0x500180, ts=0x1814a10, tc=0xbfffd63c, tt=TOK_NAME, afterDot=0) at jsparse.c:5102
#4 0x000df724 in MemberExpr (cx=0x500180, ts=0x1814a10, tc=0xbfffd63c, allowCallSyntax=1) at jsparse.c:4229
#5 0x000df264 in UnaryExpr (cx=0x500180, ts=0x1814a10, tc=0xbfffd63c) at jsparse.c:4139
#6 0x000de8c0 in MulExpr (cx=0x500180, ts=0x1814a10, tc=0xbfffd63c) at jsparse.c:3982
#7 0x000de7a8 in AddExpr (cx=0x500180, ts=0x1814a10, tc=0xbfffd63c) at jsparse.c:3964
...
|
Assignee | |
Comment 1•18 years ago
|
||
I'm checking this into trunk and 1.8 branch now.
/be
|
|
Assignee | |
Updated•18 years ago
|
|
Reporter | |
Comment 2•18 years ago
|
||
Not fixed for the case where the comment is terminated:
js> new Function("setter/*\n*/");
Assertion failure: ts->lookahead == 0 || (ts->flags & TSF_ERROR) || ON_CURRENT_LINE(ts, CURRENT_TOKEN(ts).pos) || ts->tokens[(ts->cursor + ts->lookahead) & NTOKENS_MASK].type == TOK_EOL, at jsscan.c:1018
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
|
|
Reporter | |
Updated•18 years ago
|
Keywords: fixed1.8.1
|
|
Assignee | |
Comment 3•18 years ago
|
||
Why didn't you say so? :-P
/be
Attachment #237810 -
Flags: review+
|
|
Assignee | |
Comment 4•18 years ago
|
||
Fixed harder on trunk and 1.8 branch.
/be
Status: REOPENED → RESOLVED
Closed: 18 years ago → 18 years ago
Resolution: --- → FIXED
|
|
Assignee | |
Updated•18 years ago
|
Keywords: fixed1.8.1
|
|
Reporter | |
Comment 5•18 years ago
|
||
More ways to hit the assertion in bug 352372.
|
||
Comment 6•18 years ago
|
||
Checking in regress-352208.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-352208.js,v <-- regress-352208.js
initial revision: 1.1
done
Flags: in-testsuite+
|
|
||
Comment 7•18 years ago
|
||
verified fixed 1.8 20060914 windows/linux 1.9 20060914 windows/mac*/linux
Status: RESOLVED → VERIFIED
Keywords: fixed1.8.1 → verified1.8.1
|
||
Updated•14 years ago
|
Crash Signature: [@ js_PeekTokenSameLine]
You need to log in
before you can comment on or make changes to this bug.
Description
•