Closed Bug 708006 Opened 8 years ago Closed 8 years ago

"Assertion failure: hasSlot() && !hasMissingSlot()" with frames, seal(window)

Categories

(Core :: JavaScript Engine, defect, critical)

x86_64
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla11

People

(Reporter: jruderman, Assigned: bhackett1024)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase)

Attachments

(3 files)

1. Load the testcase
2. Close the testcase

Assertion failure: hasSlot() && !hasMissingSlot(), at js/src/jsscope.h:762
Attached file stack trace
Attached patch patchSplinter Review
Incorrect use of shape->slot() instead of shape->maybeSlot().
Assignee: general → bhackett1024
Attachment #579747 - Flags: review?(luke)
Attachment #579747 - Flags: review?(luke) → review+
https://hg.mozilla.org/mozilla-central/rev/ffa6056893ed
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla11
You need to log in before you can comment on or make changes to this bug.