Closed Bug 484522 Opened 15 years ago Closed 15 years ago

TM: "Assertion failure: !JS_ON_TRACE(cx), at ../source/jsstr.cpp"

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 484524

People

(Reporter: gkw, Assigned: gal)

References

Details

(Keywords: assertion, regression, testcase)

Attachments

(1 file)

for (var z = 0; z < 4; ++z) { 'fa'.replace(/a/g, print)}

Assertion failure: !JS_ON_TRACE(cx), at ../source/jsstr.cpp:1600

(debug, with -j)

autoBisect shows this may be related to bug 463238 and http://hg.mozilla.org/tracemonkey/rev/1c6be1c210b9 :

The first bad revision is:
changeset:   26344:1c6be1c210b9
user:        Andreas Gal
date:        Fri Mar 20 18:52:11 2009 -0700
summary:     Support calling arbitrary JSFastNatives from trace (463238, r=brendan).
Flags: blocking1.9.1?
Attached patch patchSplinter Review
Assignee: general → gal
Attachment #368656 - Flags: review?(brendan)
Comment on attachment 368656 [details] [diff] [review]
patch

Want that lambda-replace self-hosting patch!

/be
Attachment #368656 - Flags: review?(brendan) → review+
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
Flags: in-testsuite?
Flags: blocking1.9.1?
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: