Closed Bug 601284 Opened 11 years ago Closed 11 years ago

"Assertion failure: obj->isNative()" with iframe, marquee, __proto__

Categories

(Core :: XBL, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: jruderman, Unassigned)

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

Assertion failure: obj->isNative(), at js/src/jslock.cpp:1238
Attached file stack trace
An opt build doesn't crash on the testcase.
This works for me now. Jesse, please reopen if you can still reproduce it.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → WORKSFORME
Crashtest: http://hg.mozilla.org/mozilla-central/rev/f45e294eca4b
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.