Closed
Bug 850564
Opened 13 years ago
Closed 13 years ago
Assertion failure: v.isUndefined(), at jsarray.cpp with --enable-root-analysis
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase)
Attachments
(1 file)
|
3.90 KB,
text/plain
|
Details |
x = wrapWithProto((new Object), Iterator.caller)
Array.prototype.push.call(x, 1)
x.length = 7
Array.prototype.reverse.call(x)
asserts js debug shell on m-c changeset c1a5c44ae3d8 without any CLI arguments at Assertion failure: v.isUndefined(),
I'll be running autoBisect overnight.
|
Reporter | |
Comment 1•13 years ago
|
||
Due to build breakage, the regression window is a little large:
http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=3eae4564001c&tochange=537fd7f9486b
|
|
Reporter | |
Updated•13 years ago
|
Summary: "Assertion failure: v.isUndefined()," with --enable-root-analysis → Assertion failure: v.isUndefined(), at jsarray.cpp with --enable-root-analysis
|
|
Reporter | |
Comment 3•13 years ago
|
||
This was likely fixed by bug 851673.
Status: NEW → RESOLVED
Closed: 13 years ago
Flags: in-testsuite?
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•