Closed Bug 669389 Opened 13 years ago Closed 13 years ago

TI: Assertion failure: proto, at jsobj.cpp:5333

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 666599

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, testcase)

The following testcase asserts on TI revision f59a6cabfbd4 (run with -j -m -a -n), tested on 64 bit:


F = function () {};
F.prototype = new ArrayBuffer;
ArrayBuffer = F;
ArrayBuffer.prototype.prop = "on prototype";
var b = new ArrayBuffer;
(b.prop, "on prototype")
Although this seems similar to 665356, jandem told me that this is still on TI with the patch of 665356 being on TI as well. It's likely a different issue.
This was fixed in TM a couple of days ago, the fix has not merged to TI yet.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
A testcase for this bug was already added in the original bug (bug 666599).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.