591426 - "Assertion failure: non-global object at end of scope chain," with sharps, __defineSetter__

Status: RESOLVED DUPLICATE of bug 612836

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

wrap.call(__defineSetter__("",function(){}),#0=*)

asserts js debug shell on TM changeset aef91431ff40 without -j at Assertion failure: non-global object at end of scope chain, at ../jsobj.cpp:6116

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   43356:d770ef6237ea
user:        Jason Orendorff
date:        Wed Jun 16 16:13:28 2010 -0500
summary:     Bug 570169 - Part 2, add assertions that gcthings do not leak across compartments. r=gal.

Comment 2

[Nicholas Nethercote [inactive]]

This now asserts like so:

  Assertion failure: parent, at ../jswrapper.cpp:304

Comment 3

[Nicholas Nethercote [inactive]]

(In reply to comment #2)
> This now asserts like so:
> 
>   Assertion failure: parent, at ../jswrapper.cpp:304

Which makes it look a lot like bug 612836.

Comment 4

[Nicholas Nethercote [inactive]]

And if I apply the (not yet landed) patch from bug 612836 the test in comment 0 no longer asserts.

Comment 6

[Christian Holler (:decoder)]

A testcase for this bug was already added in the original bug (bug 612836).