Closed
Bug 523280
Opened 15 years ago
Closed 15 years ago
"Assertion failure: (size_t)((fp->imacpc ? fp->imacpc : regs.pc) - script->code) < script->length"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Assigned: brendan)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: fixed-in-tracemonkey)
Attachments
(1 file)
|
785 bytes,
patch
|
igor
:
review+
|
Details | Diff | Splinter Review |
(function f(n) { (function(){yield})(); if(n) {f(n-1)}; void 3; })(4000)
Assertion failure: (size_t)((fp->imacpc ? fp->imacpc : regs.pc) - script->code) < script->length, at ../jsinterp.cpp:3096
|
||
Comment 1•15 years ago
|
||
I'm vaguely sure this bug has a regression window of: http://hg.mozilla.org/tracemonkey/pushloghtml?fromchange=c216d3357c5c&tochange=49b7b7e34b5e
Keywords: regression
|
|
||
Comment 2•15 years ago
|
||
(In reply to comment #1) > I'm vaguely sure this bug has a regression window of: > > http://hg.mozilla.org/tracemonkey/pushloghtml?fromchange=c216d3357c5c&tochange=49b7b7e34b5e Please ignore that - I've had a long day. :( autoBisect shows this is probably related to bug 516827: The first bad revision is: changeset: 33797:60ec3940a434 user: Brendan Eich date: Sun Oct 18 17:41:24 2009 -0700 summary: Don't build a stack frame to execute empty scripts (516827, r=igor).
Blocks: 516827
|
Assignee | |
Comment 3•15 years ago
|
||
|
||
Updated•15 years ago
|
Attachment #407318 -
Flags: review?(igor) → review+
|
|
Assignee | |
Comment 4•15 years ago
|
||
http://hg.mozilla.org/tracemonkey/rev/319be2c940b8 /be
Flags: in-testsuite?
Whiteboard: fixed-in-tracemonkey
|
||
Comment 5•15 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/319be2c940b8
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•