Closed Bug 452181 Opened 11 years ago Closed 11 years ago

TM: "Assertion failure: size_t((sp + n) - StackBase(cx->fp)) < StackDepth(cx->fp->script)"

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, regression, testcase)

./js -j
js> for (j=0;j<4;++j) { [(void 0) || {}]; }

Assertion failure: size_t((sp + n) - StackBase(cx->fp)) < StackDepth(cx->fp->script), at jstracer.cpp:2340

(js shell built from tracemonkey branch)
Here's another way to hit the same assertion:

./js -j
js> for (var j = 0; j < 4; ++j) { uneval(void 0); }

WFM with a newer debug build from the tracemonkey branch.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.