Closed Bug 459628 Opened 11 years ago Closed 11 years ago

TM: "Assertion failure: JSVAL_IS_VOID(STOBJ_GET_SLOT(obj, map->freeslot))" with new Date

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

./js -j
js> (function() { for (var odjoff = 0; odjoff < 4; ++odjoff) { new Date()[0] = 3; } })()

Assertion failure: JSVAL_IS_VOID(STOBJ_GET_SLOT(obj, map->freeslot)), at jsobj.cpp:3004
http://hg.mozilla.org/tracemonkey/rev/0e06273117f5
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Cc'ing perpetrators ;-).

/be
Doh.  Insufficiently good cut-n-paste on my part... :(  I think I + reviewers are the only perpetrators and Blake is blameless!
(In reply to comment #3)
> Doh.  Insufficiently good cut-n-paste on my part... :(  I think I + reviewers

Ulp, that would be me (see bug 456165).

I will do something to improve object allocation code, common the slot-voiding loop at least.

/be
Blocks: 458931
http://hg.mozilla.org/mozilla-central/rev/37b3fdbb0f07
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-459628.js,v  <--  regress-459628.js
initial revision: 1.1
Flags: in-testsuite+
Flags: in-litmus-
You need to log in before you can comment on or make changes to this bug.