Closed Bug 380432 Opened 13 years ago Closed 11 years ago

"Assertion failure: 0, at jsopcode.c"

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

js> function::NaN getter= function(){};
Assertion failure: 0, at jsinterp.c:5130

This might be related to bug 356378, which triggers the same assertion in a different way.
No longer blocks: 349611
Blocks: 349611
function::NaN getter= function(){};

Assertion failure: op2 == JSOP_INITELEM, at jsinterp.c:5687


this.__defineSetter__('x', {}.watch)
function::x = 3;

Assertion failure: 0, at jsopcode.c:1822
The patch for bug 356378 did not fix these cases.
The second testcase in comment 1 looks like more like bug 407230 than the testcase in comment 0.
(In reply to comment #1)
> function::NaN getter= function(){};
> 
> Assertion failure: op2 == JSOP_INITELEM, at jsinterp.c:5687

reproducible on 1.8.1 mac powerpc debug shell with js1_5/extensions/regress-356378.js. also crashes opt shell.
$ ./js-dbg-moz190-intelmac 
js> function::NaN getter= function(){};
typein:1: ReferenceError: reference to undefined XML name @mozilla.org/js/function::NaN
js>

The testcase in comment #0 now seems to work as expected in 1.9.0.x branch and on TM tip.


$ ./js-dbg-moz190-intelmac 
js> this.__defineSetter__('x', {}.watch)
js> function::x = 3;
Assertion failure: 0, at jsopcode.c:1873

The second testcase in comment #1 still shows this assertion, but not in TM tip, only in 1.9.0.x branch.
Summary: "Assertion failure: 0" with "function::NaN getter=" → [1.9.0.x branch] "Assertion failure: 0, at jsopcode.c"
Version: Trunk → 1.9.0 Branch
Severity: normal → critical
(In reply to comment #5)
> $ ./js-dbg-moz190-intelmac 
> js> function::NaN getter= function(){};
> typein:1: ReferenceError: reference to undefined XML name
> @mozilla.org/js/function::NaN
> js>
> 
> The testcase in comment #0 now seems to work as expected in 1.9.0.x branch and
> on TM tip.
> 
> 
> $ ./js-dbg-moz190-intelmac 
> js> this.__defineSetter__('x', {}.watch)
> js> function::x = 3;
> Assertion failure: 0, at jsopcode.c:1873
> 
> The second testcase in comment #1 still shows this assertion, but not in TM
> tip, only in 1.9.0.x branch.

Resolving as WFM would be a better resolution.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME
Summary: [1.9.0.x branch] "Assertion failure: 0, at jsopcode.c" → "Assertion failure: 0, at jsopcode.c"
Version: 1.9.0 Branch → Trunk
Flags: in-testsuite?
You need to log in before you can comment on or make changes to this bug.