523292 - if content jit is true , has js error-n.toLowerCase is not a function

Status: RESOLVED DUPLICATE of bug 522024

(Core :: JavaScript Engine, defect, P2)

Description

[符子文]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2b1) Gecko/20091019 Firefox/3.6b1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2b1) Gecko/20091019 Firefox/3.6b1

this error not in 3.6a1
in 3.6b1 and 3.7a1, close all plugins and extensions  ,if about:config    contetn.jit is true.
the page is has error(n.toLowerCase is not a function ) and the page is stop and initializing.



Reproducible: Always

Steps to Reproduce:
1.about:config    contetn.jit is true
2.open url
3.the page will always initializing

Comment 1

[Ria Klaassen (not reading all bugmail)]

This fails indeed with the latest Namoroka and Minefield builds on Windows Vista OS. And I confirm that it works fine with JIT disabled.
This problem didn't yet occur with the first build of September 2009 so it must be something fairly recent.

Comment 2

[Ria Klaassen (not reading all bugmail)]

Also latest TM is still failing.

Comment 3

[符子文]

yes. So I can only use 3.7a1 in the jit is disabled, or use the jit is enable in the 3.6a1. Hope to solve this problem quickly.

Comment 4

[(mostly gone) XtC4UaLL [:xtc4uall]]

FWIW, this is WFM with latest TM build (http://hg.mozilla.org/tracemonkey/rev/d31988919334)
and
MC build (http://hg.mozilla.org/mozilla-central/rev/b656b3735706)

Comment 5

[(mostly gone) XtC4UaLL [:xtc4uall]]

disregard previous comment.
it's only WFM because i checked with javascript.options.strict;true what is non-default.
strange enough that this pref has an influence on JS interpreting, thought it's error console reporting only stuff...

Comment 6

[(mostly gone) XtC4UaLL [:xtc4uall]]

this regressed within:
http://hg.mozilla.org/tracemonkey/pushloghtml?fromchange=429fe0f0a0e0&tochange=10380ffe4d49
resp.
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=38754465ffde&tochange=3079370d6597
both ranges inlude rather big merges (MC <=> TM) so this is not really helpful :-/

Comment 7

[David Anderson [:dvander] - inactive, e-mail if emergency]

This works for me on tm-tip but not on 1.9.2. From looking at the code in question it is definitely bug 522024.

Comment 8

[Onno Witvliet]

The fix for bug 522024 hasn't landed on the 1.9.2 branch. Any indication when this will land? I assume that bug 522024 is blocking 1.9.2, but I'm not sure because I've no rights to view bug 522024