Closed Bug 523284 Opened 15 years ago Closed 15 years ago

"Assertion failure: JSVAL_IS_STRING(v)" within js_DecompileFunction

Categories

(Core :: JavaScript Engine, defect, P1)

defect

Tracking

()

RESOLVED FIXED
mozilla1.9.2

People

(Reporter: jruderman, Assigned: brendan)

References

Details

(Keywords: assertion, regression, testcase, Whiteboard: fixed-in-tracemonkey)

Attachments

(1 file)

"" + (function() { var x; (function(b){x})(); })

Assertion failure: JSVAL_IS_STRING(v), at ../jsapi.h:197
autoBisect shows this is probably related to bug 516827:

The first bad revision is:
changeset:   33797:60ec3940a434
user:        Brendan Eich
date:        Sun Oct 18 17:41:24 2009 -0700
summary:     Don't build a stack frame to execute empty scripts (516827, r=igor).
Blocks: 516827
Keywords: regression
Attached patch fixSplinter Review
Assignee: general → brendan
Status: NEW → ASSIGNED
Attachment #407308 - Flags: review?(igor)
OS: Mac OS X → All
Priority: -- → P1
Hardware: x86 → All
Target Milestone: --- → mozilla1.9.2
Attachment #407308 - Flags: review?(igor) → review+
http://hg.mozilla.org/tracemonkey/rev/b7cd6baf3064

/be
Whiteboard: fixed-in-tracemonkey
Flags: in-testsuite?
http://hg.mozilla.org/mozilla-central/rev/b7cd6baf3064
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: