"Assertion failure: srcArgs.callee().getFunctionPrivate()->native() == native" with subarray()

RESOLVED FIXED in mozilla10

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
4 years ago

People

(Reporter: Jesse Ruderman, Assigned: luke)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla10
x86_64
Mac OS X
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
Uint8Array.subarray(newGlobal('new-compartment'));

Assertion failure: srcArgs.callee().getFunctionPrivate()->native() == native, at js/src/jswrapper.cpp:740

I'm guessing this is related to bug 690825.

(Tested rev 32536d199fcf)
(Assignee)

Comment 1

6 years ago
Created attachment 565418 [details] [diff] [review]
assert should allow for generic methods

Noone ever expects js_generic_native_method_dispatcher.  The patch loosens the assert.
Assignee: general → luke
Status: NEW → ASSIGNED
Attachment #565418 - Flags: review?(jwalden+bmo)
Comment on attachment 565418 [details] [diff] [review]
assert should allow for generic methods

Review of attachment 565418 [details] [diff] [review]:
-----------------------------------------------------------------

Grody.
Attachment #565418 - Flags: review?(jwalden+bmo) → review+
(Assignee)

Comment 3

6 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/246f9b7442b3
Target Milestone: --- → mozilla10
https://hg.mozilla.org/mozilla-central/rev/246f9b7442b3
Status: ASSIGNED → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.