Closed Bug 582896 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: isNumber(),"

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 580931

People

(Reporter: gkw, Unassigned)

References

Details

(Keywords: assertion, regression, testcase)

x = 0
'a'.replace(/a/, x.toLocaleString)

asserts js debug shell on JM changeset 3700c42a8e82 without -m at Assertion failure: isNumber(), at ../jsvalue.h:521

Tested to not occur on TM changeset c987f1940582, so probably JM.
This fails without -m, but passes on tm-tip.
http://hg.mozilla.org/users/danderson_mozilla.com/moo/
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
A testcase for this bug was already added in the original bug (bug 580931).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.