677371 - [jsdbg2] Assertion failure: throwing, at jscntxt.h:1274

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following code asserts on jsdbg2 branch (revision 82545b1e4129, options -j -m -d -a):


var g = newGlobal('new-compartment');
g.parent = this;
g.eval("new Debugger(parent).onExceptionUnwind = function () {};");
var g = newGlobal('new-compartment');
g.eval("function f(n) { if (n) f(n - 1); debugger; }");
var dbg = new Debugger(g);
dbg.onDebuggerStatement = function (frame) {
    if (hits === 1) { }
};
g.f(20);

Comment 1

[Jason Orendorff [:jorendorff]]

Attachment: v1

A self-inflicto.

Comment 2

[Jim Blandy :jimb]

Comment on attachment 551608 [details] [diff] [review]
v1

Review of attachment 551608 [details] [diff] [review]:
-----------------------------------------------------------------

::: js/src/jit-test/tests/debug/onExceptionUnwind-07.js
@@ +5,5 @@
> +var hits = 0;
> +dbg.onExceptionUnwind = function (frame, value) { hits = 'BAD'; };
> +dbg.onDebuggerStatement = function (frame) {
> +    if (hits++ === 0)
> +	assertEq(frame.eval("debugger;"), null);

I figured out that 'eval("debugger;")' will return undefined, but it might be more obvious if this were 'eval("debugger; 2")'.

Comment 3

[Jason Orendorff [:jorendorff]]

frame.eval returns a completion value; the test asserts that the completion value is null, indicating an uncatchable error.

http://hg.mozilla.org/users/jblandy_mozilla.com/jsdbg2/rev/48e43edc8834

Comment 4

[Jason Orendorff [:jorendorff]]

http://hg.mozilla.org/mozilla-central/rev/48e43edc8834