Closed Bug 712907 Opened 13 years ago Closed 13 years ago

Assertion failure: lastProperty()->hasTable(), at js/src/jsscope.cpp:493

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla12

People

(Reporter: decoder, Assigned: bhackett1024)

Details

(Keywords: assertion, testcase, Whiteboard: js-triage-needed)

Attachments

(2 files)

The attached test asserts on mozilla-central revision f98c57415d8d (options -m -n). I assume this test is fragile across architectures (use 32 bit) because it's an OOM (with gcparam though).
Attached patch patchSplinter Review
The return value of the hashify() call when converting objects to dictionary mode was being ignored.
Assignee: general → bhackett1024
Attachment #584132 - Flags: review?(luke)
Attachment #584132 - Flags: review?(luke) → review+
https://hg.mozilla.org/mozilla-central/rev/cf4feabb94cc
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla12
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: