Closed Bug 695647 Opened 13 years ago Closed 3 years ago

Assertion failure: js_CheckForStringIndex(ida->vector[n]) == ida->vector[n], at jsapi.cpp:4002

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: decoder, Unassigned)

Details

(Keywords: assertion, testcase, Whiteboard: js-triage-needed) 

The following test asserts in Firefox nightly 2011-10-12 (built from revision 46a6d0fd13d5):


<form id="form1">
<input form='form1' type="input" value="10"/>
<script>
  var form1 = document.getElementById("form1");
</script>
<script type="text/javascript">
  ({ native : this }) ();
</script>


Could be related to bug 569024 but does not involve uneval.
Calling the object ({ native : this }) will call either uneval or DVG while trying to produce an error message. So this could be a dup of bug 569024, depending on the stack.
Assignee: general → nobody

Hey Christian,
Can you still reproduce this issue or should we close it?

Flags: needinfo?(choller)
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → WORKSFORME
Flags: needinfo?(choller)
You need to log in before you can comment on or make changes to this bug.