Closed Bug 783989 Opened 7 years ago Closed 7 years ago

Assertion failure: isObject(), at ../../jsapi.h:474 or Opt Crash [@ global]

Categories

(Core :: JavaScript Engine, defect, critical)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla17

People

(Reporter: decoder, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, crash, testcase, Whiteboard: [jsbugmon:update])

Attachments

(1 file)

The following test asserts/crashes on mozilla-central revision (no options required):


wrapWithProto(0);


This function seems debug only. Is this function in general safe to be used without having crashes to expect?
Forgot the revision, c676b554c7bb.
Silly bug. Flagging eddy for review.
Attachment #653435 - Flags: review?(ejpbruel)
Comment on attachment 653435 [details] [diff] [review]
Return false after reporting error. v1

Review of attachment 653435 [details] [diff] [review]:
-----------------------------------------------------------------

I guess I should have caught this in my review of the original patch. Oh well. LGTM.
Attachment #653435 - Flags: review?(ejpbruel) → review+
https://hg.mozilla.org/mozilla-central/rev/e81f71fda16f
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla17
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug783989.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.