"Assertion failure: hasSlot() && !hasMissingSlot()" with frames, seal(window)

RESOLVED FIXED in mozilla11

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: Jesse Ruderman, Assigned: bhackett)

Tracking

(Blocks: 2 bugs, {assertion, testcase})

Trunk
mozilla11
x86_64
Mac OS X
assertion, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(3 attachments)

(Reporter)

Description

6 years ago
Created attachment 579378 [details]
testcase (asserts fatally when closed)

1. Load the testcase
2. Close the testcase

Assertion failure: hasSlot() && !hasMissingSlot(), at js/src/jsscope.h:762
(Reporter)

Comment 1

6 years ago
Created attachment 579379 [details]
stack trace
(Assignee)

Comment 2

6 years ago
Created attachment 579747 [details] [diff] [review]
patch

Incorrect use of shape->slot() instead of shape->maybeSlot().
Assignee: general → bhackett1024
Attachment #579747 - Flags: review?(luke)

Updated

6 years ago
Attachment #579747 - Flags: review?(luke) → review+
(Assignee)

Comment 3

6 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/ffa6056893ed
https://hg.mozilla.org/mozilla-central/rev/ffa6056893ed
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla11
You need to log in before you can comment on or make changes to this bug.