[jsdbg2] Assertion failure: isObjectOrNull(), at js/src/jsapi.h:547

RESOLVED FIXED in mozilla16

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
5 years ago

People

(Reporter: decoder, Assigned: evilpie)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla16
x86_64
Linux
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
The following test asserts on mozilla-central 1962ca549264 (options -m -n):


var g = newGlobal('new-compartment');
var dbg1 = new Debugger;
var gw1 = dbg1.addDebuggee(g);
var dbg2 = new Debugger;
var gw2 = dbg2.addDebuggee((gw1.__proto__));
(Assignee)

Comment 1

5 years ago
Created attachment 633882 [details] [diff] [review]
fix
Assignee: jorendorff → evilpies
Status: NEW → ASSIGNED
Attachment #633882 - Flags: review?(jorendorff)
Comment on attachment 633882 [details] [diff] [review]
fix

Great. Thanks.
Attachment #633882 - Flags: review?(jorendorff) → review+
(Assignee)

Comment 3

5 years ago
http://hg.mozilla.org/integration/mozilla-inbound/rev/d08e07ea1888

Comment 4

5 years ago
https://hg.mozilla.org/mozilla-central/rev/d08e07ea1888
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla16
(Reporter)

Comment 5

5 years ago
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.