Closed Bug 635805 Opened 11 years ago Closed 11 years ago
"Assertion failure: fp->is
Function Frame() && !fp->is Eval Frame()"
Assertion failure: fp->isFunctionFrame() && !fp->isEvalFrame(), at js/src/jsinterpinlines.h:530 I think this started within the last few hours. I guess it's a regression from bug 634542. That patch added a call from RunScript to PutActivationObjects, which is seen in this bug's stack trace.
Ah, d'oh! Thanks Jesse. Bug 635805 is going to make all this explicit PutActivationObjects business unnecessary, but might as well fix the temporary fix first.
Assignee: general → lw
Status: NEW → ASSIGNED
Attachment #514120 - Flags: review?(gal)
11 years ago
Attachment #514120 - Flags: review?(gal) → review+
http://hg.mozilla.org/mozilla-central/rev/102927bff6de Erg, I just realized I forgot the most excellent test case. I will add that to my follow-up work in bug 635811. OOC Jesse, have you specifically trained your fuzzers to hammer on this function-in-cleared-global corner case, or did this just naturally occur?
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
blocking2.0: ? → betaN+
You need to log in before you can comment on or make changes to this bug.