Closed Bug 486039 Opened 16 years ago Closed 16 years ago

overstock.com triggers "Assertion failure: regs.sp == StackBase(fp)"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

(
URL
)

Details

(Keywords: assertion, Whiteboard: fixed-in-tracemonkey)

On mozilla-central, loading overstock.com triggers Assertion failure: regs.sp == StackBase(fp), at /Users/jruderman/central/js/src/jsinterp.cpp:3017
I just hit this too, loading nba.com from the page_load_test set. I think it is regex related.
Severity: trivial → critical
I remember a similar crash that happened when we accidentally traced a constructor as a regular function call. ccing Waldo who helped diagnosing that.
I added an assertion to catch the underlying reason we hit that assertion, so this has a different cause. None of my full builds are up-to-date enough to test this out now, alas, so it'll have to wait until I can get one finished.
this appears to be fixed in both cases on TM trunk
(In reply to comment #4) > this appears to be fixed in both cases on TM trunk I agree here, just tested on TM tip Minefield on Mac.
Whiteboard: fixed-in-tracemonkey
this should be fixed due to a recent merge
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.