Closed Bug 795937 Opened 12 years ago Closed 12 years ago

Assertion failure: !isProxy(), at ../jsobjinlines.h:709

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED WORKSFORME

People

(Reporter: decoder, Unassigned)

Details

(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update,bisect])

The following testcase asserts on mozilla-central revision 895f66c4eada (run with ):


var g = newGlobal('new-compartment');
new Proxy(g, {});
Accidentially flagged s-s, but this only crashes in a null-deref so I assume it's harmless. Test doesn't require any options.
Group: core-security
Whiteboard: [jsbugmon:update,bisect]
Eddy fixed this in 22c9c298a21f, which landed after the main patches for bug 787856 (which was what regressed this in the first place).
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WORKSFORME
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite? → in-testsuite+
You need to log in before you can comment on or make changes to this bug.