Closed Bug 462560 Opened 16 years ago Closed 15 years ago

TM: "Assertion failure: s0->isQuad()" after changing Array.prototype

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

Details

(Keywords: assertion, testcase) 

Array.prototype[0] = 0;
eval("for (var j = 0; j < 4; ++j) { [][0]; }");

Assertion failure: s0->isQuad(), at jstracer.cpp:778
this seems fixed. reopen if this is not the case.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → WORKSFORME
Still asserts for me when I paste into js -j.
Status: RESOLVED → REOPENED
Resolution: WORKSFORME → ---
Summary: "Assertion failure: s0->isQuad()" after changing Array.prototype → TM: "Assertion failure: s0->isQuad()" after changing Array.prototype
(In reply to comment #1)
> this seems fixed. reopen if this is not the case.

(In reply to comment #2)
> Still asserts for me when I paste into js -j.

I'm agreeing with comment #2, still asserts for me too.
Status: REOPENED → NEW
Flags: wanted1.9.1?
(In reply to comment #3)
> I'm agreeing with comment #2, still asserts for me too.

Now WFM with TM tip.
Status: NEW → RESOLVED
Closed: 16 years ago → 15 years ago
Flags: wanted1.9.1?
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.