TM: "Assertion failure: JS_ON_TRACE(cx)" with a bunch of getters and an array comprehension

RESOLVED WORKSFORME

Status

()

Core
JavaScript Engine
--
critical
RESOLVED WORKSFORME
10 years ago
10 years ago

People

(Reporter: Jesse Ruderman, Unassigned)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
x86
Mac OS X
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

10 years ago
a = 1;
this.__defineGetter__('b', function () 3.5);
f = '';
this.__defineGetter__('c', function () {});
this.__defineGetter__('d', function () {});
f = 0;
this.__defineGetter__('e', function () 3);
[1 for each (x in this) if (x)];

Assertion failure: JS_ON_TRACE(cx), at jsbuiltins.cpp:110

(Happens both with pasting into ./js and with feeding to ./js as a file)
(Reporter)

Updated

10 years ago
Summary: "Assertion failure: JS_ON_TRACE(cx)" with a bunch of getters and an array comprehension → TM: "Assertion failure: JS_ON_TRACE(cx)" with a bunch of getters and an array comprehension
(Reporter)

Comment 1

10 years ago
WFM
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.