Assertion failure: iter.isNativeCall() && iter.callee()->native() == DumpStack, at shell/js.cpp:2141

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: decoder, Unassigned)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
x86
Linux
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [js:t] [jsbugmon:])

(Reporter)

Description

5 years ago
The following test asserts on mozilla-central revision 19bfe36cace8 (options -m -n -a):


function testApplyCallHelper(f) {
    for (var i = 0; i < 10; ++i) dumpStack.apply(this,[0,1]);
}
function testApplyCall() {
    var r = testApplyCallHelper(function (a0,a1,a2,a3,a4,a5,a6,a7) { x = [a0,a1,a2,a3,a4,a5,a6,a7]; });
}
testApplyCall();


Likely debug only due to "dumpStack" being involved.
Whiteboard: js-triage-needed [jsbugmon:update] → [js:t][jsbugmon:update]
(Reporter)

Updated

5 years ago
Whiteboard: [js:t][jsbugmon:update] → [js:t] [jsbugmon:update,ignore]
(Reporter)

Comment 1

5 years ago
JSBugMon: The testcase found in this bug no longer reproduces (tried revision 7fe96a690596).
(Reporter)

Updated

5 years ago
Whiteboard: [js:t] [jsbugmon:update,ignore] → [js:t] [jsbugmon:bisectfix]
(Reporter)

Updated

5 years ago
Whiteboard: [js:t] [jsbugmon:bisectfix] → [js:t] [jsbugmon:]
(Reporter)

Comment 2

5 years ago
JSBugMon: Fix Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first good revision is:
changeset:   97988:b323d6090b21
user:        Luke Wagner
date:        Fri Jun 29 10:34:09 2012 -0700
summary:     Bug 768446 - Remove StackIter stack-sniffing (r=dvander)
(Reporter)

Comment 3

5 years ago
Assuming this was fixed by bug 768446 which seems plausible.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 768446
if it's a known plausible fix, it's still marked resolved FIXED.
Resolution: DUPLICATE → FIXED
(Reporter)

Comment 5

5 years ago
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.