381547 - "Assertion failure: cursor == (uint8 *)copy->messageArgs[0] + argsCopySize"

Status: RESOLVED DUPLICATE of bug 473709

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

I've hit this twice, but I can't reproduce at will, so I can't make a reduced testcase.

Assertion failure: cursor == (uint8 *)copy->messageArgs[0] + argsCopySize, at jsexn.c:185

Thread 0 Crashed:
0   js 	0x000cb1be JS_Assert + 70 (jsutil.c:60)
1   js 	0x00049eac CopyErrorReport + 698 (jsexn.c:188)
2   js 	0x0004a447 InitExnPrivate + 1040 (jsexn.c:353)
3   js 	0x0004cdba js_ErrorToException + 643 (jsexn.c:1221)
4   js 	0x000b74c8 ReportCompileErrorNumber + 947 (jsscan.c:685)
5   js 	0x000b772e js_ReportCompileErrorNumberUC + 101 (jsscan.c:773)
6   js 	0x000acd26 ParseTerm + 3498 (jsregexp.c:1420)
7   js 	0x000ab05b ParseRegExp + 331 (jsregexp.c:647)
8   js 	0x000ae250 js_NewRegExp + 446 (jsregexp.c:1958)
9   js 	0x000b4cf1 js_NewRegExpObject + 106 (jsregexp.c:4239)
10  js 	0x000bb2ff js_GetToken + 11606 (jsscan.c:1959)
11  js 	0x000b8268 js_PeekToken + 74 (jsscan.c:1036)
12  js 	0x0009ad3d Statements + 715 (jsparse.c:1475)
13  js 	0x000990c7 FunctionBody + 295 (jsparse.c:743)
14  js 	0x0009937c js_CompileFunctionBody + 462 (jsparse.c:825)
15  js 	0x000519c4 Function + 3384 (jsfun.c:2036)
16  js 	0x000594e9 js_Invoke + 2945 (jsinterp.c:1332)
17  js 	0x0005ab01 js_InvokeConstructor + 505 (jsinterp.c:1905)
18  js 	0x00064dec js_Interpret + 41279 (jsinterp.c:3448)
19  js 	0x00059e3d js_Execute + 715 (jsinterp.c:1591)
20  js 	0x0001ab6f JS_ExecuteScript + 54 (jsapi.c:4692)
21  js 	0x00001e89 Process + 487 (js.c:233)
22  js 	0x00002a3b ProcessArgs + 2045 (js.c:519)
23  js 	0x00007968 main + 612 (js.c:3260)
24  js 	0x00001b46 _start + 216
25  js 	0x00001a6d start + 41

Comment 1

[Jesse Ruderman]

I haven't hit this lately, fwiw.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

(In reply to comment #1)
> I haven't hit this lately, fwiw.

I have, and I'm somewhat sure you hit bug 473709. :)