Created attachment 565772 [details]
testcase (asserts fatally on 25% of launches)
On about 25% of launches of Firefox, this testcase triggers:
Assertion failure: cannot reenter, at js/src/jsproxy.cpp:880
This assertion was added in:
Bug 683361 - Fix part 6: add and call Proxy::objectClassIs (r=waldo)
Related to bug 618906?
Created attachment 565773 [details]
top of the stack
Jesse, can you still reproduce the crash? Also, what platform?
Regardless, this shouldn't be an infinite recursion; it isn't in the shell...
Ah, so the infinite recursion is happening outside the engine when XPConnect tries to convert the cyclic object to nsISupports and the assert is bogus and can be removed. I added the assert for visual symmetry with the other Proxy functions but it clearly has false negatives.
Created attachment 565972 [details] [diff] [review]