Closed
Bug 829821
Opened 12 years ago
Closed 12 years ago
"Assertion failure: isNative(),"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 829813
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
|
6.18 KB,
text/plain
|
Details |
x = [];
x.unshift(Uint8ClampedArray);
x.forEach(Array.prototype.push.bind(new Uint8ClampedArray))
asserts js debug shell on m-c changeset 44dcffe8792b without any CLI arguments at Assertion failure: isNative(),
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 118493:f4671ccc4502
user: Brian Hackett
date: Thu Jan 10 17:53:11 2013 -0700
summary: Bug 827490 - Allow native objects to have both slots and dense elements, rm dense/slow array distinction, r=billm, dvander.
|
||
Comment 1•12 years ago
|
||
Fix for this in bug 829813 (issue isn't exactly the same, but very similar).
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
|
||
Comment 2•12 years ago
|
||
A testcase for this bug was already added in the original bug (bug 829813).
Flags: in-testsuite-
You need to log in
before you can comment on or make changes to this bug.
Description
•