Closed Bug 643241 Opened 9 years ago Closed 9 years ago

TI: "Assertion failure: getType()->hasSpecialEquality,"

Categories

(Core :: JavaScript Engine, defect, critical)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: gkw, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase, Whiteboard: fixed-in-jaegermonkey)

Attachments

(1 file)

*/
function (){}

asserts js debug shell on JM changeset 5ce2f7a90286 with -m at Assertion failure: getType()->hasSpecialEquality,
Attached file stack
The TypeObject->hasSpecialEquality bit is not maintained if inference is disabled, this always sets it to true in such cases.

http://hg.mozilla.org/projects/jaegermonkey/rev/6ca659590941
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Whiteboard: fixed-in-jaegermonkey
You need to log in before you can comment on or make changes to this bug.