763977 - content window.onerror from chrome code causes assertion failure: compartments mismatch

Status: RESOLVED DUPLICATE of bug 763225

(Core :: JavaScript Engine, defect)

Description

[Mihai Sucan [:msucan]]

I just made a change to a mochitest for the Web Console. I added contentWindow.onerror = someFunction to check if a specific error shows up in the page I load in a tab. This works in opt builds, but in dbg builds I get assertion failure: compartments mismatch.

This is the try push I did with the code:
https://tbpl.mozilla.org/?tree=Try&rev=848032c9a87a

The offending test file is:
browser/devtools/webconsole/test/browser_webconsole_bug_595934_message_categories.js

I'm reporting this as a security bug as suggested by Ehsan. Please let me know if there's something I can help with. Thank you!

Comment 1

[Kyle Huey (Exited; not receiving bugmail, old account, do not use)]

If I'm not mistaken this is basically the same issue as bug 763225.

Comment 2

[Olli Pettay [:smaug][[e-mail]]]

Yes, looks like the same issue.