Closed Bug 665356 Opened 15 years ago Closed 15 years ago

"Assertion failure: proto" with ArrayBuffer

Categories

(Core :: JavaScript Engine, defect)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: crash, regression, testcase)

Attachments

(1 file)

Assertion failure: proto, at js/src/jsobj.cpp:4900 (in LookupPropertyWithFlagsInline) I only see this on the TM branch. I'm guessing it's a regression from bug 656519.
The fix for bug 665355 seems to fix this too, please confirm.
Yes, the patch makes the assertion failure go away. With the patch, length is 1.
Depends on: 665355
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: