Closed Bug 596449 Opened 14 years ago Closed 14 years ago

Assertion failure: "(*dictp)->listp == dictp" in js::Shape::insertIntoDictionary (this=0xa31bd108, dictp=0xa39c7c60)

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
normal

Tracking

()

VERIFIED DUPLICATE of bug 596128

People

(Reporter: ddahl, Unassigned)

Details

Attachments

(1 file)

Attached file Backtrace
I think that is what the bt says, it is attached. I did have the patches from bug 587734 and its' dependency bugs built
Attachment #475363 - Attachment mime type: application/octet-stream → application/text
Attachment #475363 - Attachment mime type: application/text → text/plain
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Summary: crash in js::Shape::insertIntoDictionary (this=0xa31bd108, dictp=0xa39c7c60) → Assertion failure: "(*dictp)->listp == dictp" in js::Shape::insertIntoDictionary (this=0xa31bd108, dictp=0xa39c7c60)
Please cite 'Assertion failure: "..."' in the bug summary and look for dups based on the asserted expression.

/be
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: