"Assertion failure: compartment mismatched" with makeFinalizeObserver

RESOLVED FIXED in mozilla16

Status

()

Core
JavaScript Engine
RESOLVED FIXED
6 years ago
5 years ago

People

(Reporter: jandem, Assigned: gal)

Tracking

({assertion, regression, testcase})

Trunk
mozilla16
assertion, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(blocking2.0 -)

Details

Attachments

(2 attachments)

(Reporter)

Description

6 years ago
--
var o = newGlobal('new-compartment');
o.makeFinalizeObserver();
--
This seems to be shell-only, but it would be nice to fix this for fuzzers.
(Reporter)

Comment 1

6 years ago
Created attachment 515345 [details]
Stack trace
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   62765:6e2ee1f3f6c6
user:        Brendan Eich
date:        Wed Feb 23 19:38:27 2011 -0800
summary:     Followup fixes and tests in wake of global |this| binding change (636364, r=luke/gal/dvander, thanks to Waldo for the newGlobal shell function).

Hope for .x
Blocks: 636364
blocking2.0: --- → ?
Keywords: regression
Version: unspecified → Trunk
(Assignee)

Comment 3

6 years ago
Shell only, NPOTB, can't block by definition, but definitely something we should fix right away.
blocking2.0: ? → -
(Assignee)

Updated

6 years ago
Assignee: general → brendan
(Assignee)

Comment 4

6 years ago
Created attachment 515374 [details] [diff] [review]
patch

Ah JS_GetGlobalObject, we love you so much.
Assignee: brendan → gal
Attachment #515374 - Flags: review?(lw)
(Assignee)

Comment 5

6 years ago
Gary, you can push this patch after luke reviewed it.

Comment 6

6 years ago
Comment on attachment 515374 [details] [diff] [review]
patch

can haz JS_GetGlobalForScopeChain instead?
Attachment #515374 - Flags: review?(lw) → review+

Updated

5 years ago
Blocks: 731549

Comment 7

5 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/654fdf0a3355
Target Milestone: --- → mozilla16

Comment 8

5 years ago
https://hg.mozilla.org/mozilla-central/rev/654fdf0a3355
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Duplicate of this bug: 731549
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/testBug637014.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.