Assertion failure: srcArgs.callee().getFunctionPrivate()->native() == native, at jswrapper.cpp:740

RESOLVED FIXED in mozilla10

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
4 years ago

People

(Reporter: decoder, Assigned: luke)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla10
x86_64
Linux
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: js-triage-done)

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
The following test asserts on mozilla-central revision 38a487da2def (no options required):


var x = newGlobal("new-compartment").Date;
var OBJ = new MyObject( new x(0) );
eval("OBJ.valueOf()");
function MyObject( value ) {
  this.valueOf = x.prototype.valueOf;
}


autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   78133:6029755897c3
user:        Luke Wagner
date:        Tue Oct 04 10:48:36 2011 -0700
summary:     Bug 690825 - Fix nativeCall assert; HandleNonGenericMethodClassMismatch should not assume args.callee() is the native (r=waldo)
(Assignee)

Comment 1

6 years ago
Oops, harmless assert in this case; easy fix.
(Assignee)

Updated

6 years ago
Whiteboard: js-triage-needed → js-triage-done
(Assignee)

Comment 2

6 years ago
Created attachment 565053 [details] [diff] [review]
fix Date.prototype.valueOf, add test

And of course, I somehow forgot the 44th Date.prototype non-generic method in testCrossCompartmentTransparency.
Assignee: general → luke
Attachment #565053 - Flags: review?(jwalden+bmo)
Attachment #565053 - Flags: review?(jwalden+bmo) → review+
(Assignee)

Comment 3

6 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/e7968e208ea8
Target Milestone: --- → mozilla10
https://hg.mozilla.org/mozilla-central/rev/e7968e208ea8
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
(Reporter)

Comment 5

4 years ago
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.