Note: There are a few cases of duplicates in user autocompletion which are being worked on.

Assertion failure: srcArgs.callee().toFunction()->native() == native || srcArgs.callee().toFunction()->native() == js_generic_native_method_dispatcher, at jswrapper.cpp:788

RESOLVED FIXED in mozilla14

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: decoder, Assigned: jorendorff)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla14
x86_64
Linux
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: js-triage-needed [jsbugmon:update])

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
The following test asserts on mozilla-central revision da0d07b5ca1e (options -m -n -a):


var assertThrowsInstanceOf = function assertThrowsInstanceOf(f, ctor, msg) {
    f();
}
function testcase(obj, fn) {
    var args = Array.slice(arguments, 2);
    assertThrowsInstanceOf(function () { fn.apply(obj, args); }, TypeError);
}
function test(obj) {
    testcase(obj, Map.prototype.size);
}
test((newGlobal('new-compartment')));

Comment 1

5 years ago
The first bad revision is:
changeset:   3f51e7052b7d
user:        Jason Orendorff
date:        Thu Mar 01 09:01:45 2012 -0600
summary:     Add Map.prototype.size and Set.prototype.size. Bug 726298, r=luke.
(Assignee)

Updated

5 years ago
Assignee: general → jorendorff
(Assignee)

Comment 2

5 years ago
Created attachment 612913 [details] [diff] [review]
v1

Assigning to djvj for no good reason. :)
Attachment #612913 - Flags: review?(kvijayan)

Updated

5 years ago
Attachment #612913 - Flags: review?(kvijayan) → review+
(Assignee)

Comment 3

5 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/fcd6861385da
https://hg.mozilla.org/mozilla-central/rev/fcd6861385da
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla14
(Reporter)

Comment 5

5 years ago
A testcase for this bug was automatically identified at js/src/jit-test/tests/collections/bug-743101.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.