"Assertion failure: ss->sprinter.base[start] == '[' || ss->sprinter.base[start] == '#'" with trap, getter, watch

RESOLVED WORKSFORME

Status

()

Core
JavaScript Engine
RESOLVED WORKSFORME
10 years ago
9 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
x86
Mac OS X
assertion, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

10 years ago
function f() { [1 for each (p in {x getter: watch})] }
trap(f, 0, "");
f();

Assertion failure: ss->sprinter.base[start] == '[' || ss->sprinter.base[start] == '#', at jsopcode.c:2804

In opt, execution stops, but nothing really bad seems to happen.

Comment 1

10 years ago
Igor's patch from bug 430293 comment #8 fixes this.
Depends on: 430293
(Reporter)

Comment 2

9 years ago
WFM
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.