692366 - "Assertion failure: srcArgs.callee().getFunctionPrivate()->native() == native" with subarray()

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

Uint8Array.subarray(newGlobal('new-compartment'));

Assertion failure: srcArgs.callee().getFunctionPrivate()->native() == native, at js/src/jswrapper.cpp:740

I'm guessing this is related to bug 690825.

(Tested rev 32536d199fcf)

Comment 1

[Luke Wagner [:luke]]

Attachment: assert should allow for generic methods

Noone ever expects js_generic_native_method_dispatcher.  The patch loosens the assert.

Comment 2

[Jeff Walden [:Waldo]]

Comment on attachment 565418 [details] [diff] [review]
assert should allow for generic methods

Review of attachment 565418 [details] [diff] [review]:
-----------------------------------------------------------------

Grody.

Comment 3

[Luke Wagner [:luke]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/246f9b7442b3

Comment 4

[Marco Bonardo [:mak] (Away Apr 25 - May 5)]

https://hg.mozilla.org/mozilla-central/rev/246f9b7442b3

Comment 5

[Christian Holler (:decoder)]

Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929