407291 - in debug builds I abort() in EmitSwitch in jsemit.c:2772 when visiting http://www.thepcspy.com/kittenauth

Status: RESOLVED DUPLICATE of bug 407024

(Firefox :: General, defect)

Description

[(not reading, please use [e-mail] instead)]

visit http://www.thepcspy.com/kittenauth and we'll abort().

Assertion failure: JSVAL_IS_NUMBER(pn3->pn_val) || JSVAL_IS_STRING(pn3->pn_val) || JSVAL_IS_BOOLEAN(pn3->pn_val), at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:2774

#0  0x9003d66c in kill ()
#1  0x9010e8cf in raise ()
#2  0x9010d422 in abort ()
#3  0x010df5bb in JS_Assert (s=0x1100750 "JSVAL_IS_NUMBER(pn3->pn_val) || JSVAL_IS_STRING(pn3->pn_val) || JSVAL_IS_BOOLEAN(pn3->pn_val)", file=0x10ffeac "/Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c", ln=2774) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsutil.c:63
#4  0x01045328 in EmitSwitch (cx=0x3f386940, cg=0x3a7b0c40, pn=0x3a770638, stmtInfo=0xbfffca44) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:2772
#5  0x01048dd2 in js_EmitTree (cx=0x3f386940, cg=0x3a7b0c40, pn=0x3a770638) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:4185
#6  0x0104bb60 in js_EmitTree (cx=0x3f386940, cg=0x3a7b0c40, pn=0x3a770610) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:5151
#7  0x01048ba9 in js_EmitTree (cx=0x3f386940, cg=0x3a7b0c40, pn=0x3a4050c8) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:4141
#8  0x0104bb60 in js_EmitTree (cx=0x3f386940, cg=0x3a7b0c40, pn=0x4352c0f0) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:5151
#9  0x0104622c in js_EmitFunctionBytecode (cx=0x3f386940, cg=0x3a7b0c40, body=0x4352c0f0) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:3168
#10 0x010481d3 in js_EmitTree (cx=0x3f386940, cg=0xbfffd370, pn=0x4352c0b8) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsemit.c:3969
#11 0x010adf55 in Statements (cx=0x3f386940, ts=0xbfffd4f4, tc=0xbfffd370) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsparse.c:1452
#12 0x010abf9f in js_CompileScript (cx=0x3f386940, obj=0x390ec540, principals=0x43f981e4, tcflags=4096, chars=0x39add000, length=82439, file=0x0, filename=0x3ce3c2f1 "http://i.thepcspy.com/j/packed.js", lineno=4) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsparse.c:602
#13 0x0108d30c in obj_eval (cx=0x3f386940, obj=0x390ec540, argc=1, argv=0x3a4f1840, rval=0xbfffd744) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsobj.c:1435
#14 0x01063aae in js_Invoke (cx=0x3f386940, argc=1, vp=0x3a4f1838, flags=0) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsinterp.c:1356
#15 0x01075a37 in js_Interpret (cx=0x3f386940, pc=0x3ed66eb2 "y", result=0xbfffdddc) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsinterp.c:4175
#16 0x01064435 in js_Execute (cx=0x3f386940, chain=0x390ec540, script=0x3ed66e40, down=0x0, flags=0, result=0xbfffdf08) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsinterp.c:1601
#17 0x0102093f in JS_EvaluateUCScriptForPrincipals (cx=0x3f386940, obj=0x390ec540, principals=0x43f981e4, chars=0x390ee008, length=49744, filename=0x3e233838 "http://i.thepcspy.com/j/packed.js", lineno=1, rval=0xbfffdf08) at /Users/sspitzer/Desktop/trunk/mozilla/js/src/jsapi.c:4858
#18 0x15e7dbfc in nsJSContext::EvaluateString (this=0x39ece4d0, aScript=@0x3a983114, aScopeObject=0x390ec540, aPrincipal=0x43f981e0, aURL=0x3e233838 "http://i.thepcspy.com/j/packed.js", aLineNo=1, aVersion=0, aRetValue=0x0, aIsUndefined=0xbfffe024) at /Users/sspitzer/Desktop/trunk/mozilla/dom/src/base/nsJSEnvironment.cpp:1518
#19 0x15cedcae in nsScriptLoader::EvaluateScript (this=0x441f2180, aRequest=0x3a983100, aScript=@0x3a983114) at /Users/sspitzer/Desktop/trunk/mozilla/content/base/src/nsScriptLoader.cpp:616
#20 0x15cedf7c in nsScriptLoader::ProcessRequest (this=0x441f2180, aRequest=0x3a983100) at /Users/sspitzer/Desktop/trunk/mozilla/content/base/src/nsScriptLoader.cpp:530
#21 0x15cee001 in nsScriptLoader::ProcessPendingRequests (this=0x441f2180) at /Users/sspitzer/Desktop/trunk/mozilla/content/base/src/nsScriptLoader.cpp:663
#22 0x15cee211 in nsScriptLoader::OnStreamComplete (this=0x441f2180, aLoader=0x3e28a680, aContext=0x3a983100, aStatus=0, aStringLen=49744, aString=0x390db008 "//Packed with AutoPacker - http://thepcspy.com/autopacker\n//Packed at 1195467994\n//See unpacked.js for more details including copyright\neval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseIn"...) at /Users/sspitzer/Desktop/trunk/mozilla/content/base/src/nsScriptLoader.cpp:838
#23 0x2e1456fa in nsStreamLoader::OnStopRequest (this=0x3e28a680, request=0x29d4670, ctxt=0x3a983100, aStatus=0) at /Users/sspitzer/Desktop/trunk/mozilla/netwerk/base/src/nsStreamLoader.cpp:108
#24 0x2e14510d in nsStreamListenerTee::OnStopRequest (this=0x43f769f0, request=0x29d4670, context=0x3a983100, status=0) at /Users/sspitzer/Desktop/trunk/mozilla/netwerk/base/src/nsStreamListenerTee.cpp:65
#25 0x2e1cee42 in nsHttpChannel::OnStopRequest (this=0x29d4640, request=0x43f6e260, ctxt=0x0, status=0) at /Users/sspitzer/Desktop/trunk/mozilla/netwerk/protocol/http/src/nsHttpChannel.cpp:4412
#26 0x2e120a33 in nsInputStreamPump::OnStateStop (this=0x43f6e260) at /Users/sspitzer/Desktop/trunk/mozilla/netwerk/base/src/nsInputStreamPump.cpp:576
#27 0x2e120b51 in nsInputStreamPump::OnInputStreamReady (this=0x43f6e260, stream=0x39e1e34c) at /Users/sspitzer/Desktop/trunk/mozilla/netwerk/base/src/nsInputStreamPump.cpp:401
#28 0x013c6c04 in nsInputStreamReadyEvent::Run (this=0x3ab0e230) at /Users/sspitzer/Desktop/trunk/mozilla/xpcom/io/nsStreamUtils.cpp:111
#29 0x0136becb in nsThread::ProcessNextEvent (this=0x2925770, mayWait=0, result=0xbfffe424) at /Users/sspitzer/Desktop/trunk/mozilla/xpcom/threads/nsThread.cpp:510
#30 0x013114a5 in NS_ProcessPendingEvents_P (thread=0x2925770, timeout=20) at nsThreadUtils.cpp:180
#31 0x334c99d7 in nsBaseAppShell::NativeEventCallback (this=0x2925de0) at /Users/sspitzer/Desktop/trunk/mozilla/widget/src/xpwidgets/nsBaseAppShell.cpp:112
#32 0x334aa27f in nsAppShell::ProcessGeckoEvents (aInfo=0x2925de0) at /Users/sspitzer/Desktop/trunk/mozilla/widget/src/cocoa/nsAppShell.mm:294
#33 0x9082cf32 in CFRunLoopRunSpecific ()
#34 0x9082ca6e in CFRunLoopRunInMode ()
#35 0x92deb878 in RunCurrentEventLoopInMode ()
#36 0x92deaf82 in ReceiveNextEventCommon ()
#37 0x92deadd9 in BlockUntilNextEventMatchingListInMode ()
#38 0x93291485 in _DPSNextEvent ()
#39 0x93291076 in -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ()
#40 0x9328adfb in -[NSApplication run] ()
#41 0x334a9632 in nsAppShell::Run (this=0x2925de0) at /Users/sspitzer/Desktop/trunk/mozilla/widget/src/cocoa/nsAppShell.mm:565
#42 0x327e5bd1 in nsAppStartup::Run (this=0x2955b60) at /Users/sspitzer/Desktop/trunk/mozilla/toolkit/components/startup/src/nsAppStartup.cpp:170
#43 0x002112b8 in XRE_main (argc=1, argv=0xbffff830, aAppData=0x290b400) at /Users/sspitzer/Desktop/trunk/mozilla/toolkit/xre/nsAppRunner.cpp:3145
#44 0x00002798 in main (argc=1, argv=0xbffff830) at /Users/sspitzer/Desktop/trunk/mozilla/browser/app/nsBrowserApp.cpp:153

Comment 1

[(not reading, please use [e-mail] instead)]

Attachment: a test case, but not reduced

Comment 2

[(not reading, please use [e-mail] instead)]

this was with Build identifier: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; rv:1.9b2pre) Gecko/2007120520 Minefield/3.0b2pre