Assertion failure: !cx->isExceptionPending(), at ../jscntxtinlines.h:223

NEW
Unassigned

Status

()

Core
JavaScript Engine
--
critical
5 years ago
5 years ago

People

(Reporter: decoder, Unassigned)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
x86_64
Linux
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
The following testcase asserts on mozilla-central revision 77b5c6edfe96 (run with --fuzzing-safe):


function ReferenceError() {}
evaluate('\
function testcase() {\
        try {\
            testcase();\
        } catch (e) {\
            return e instanceof ReferenceError;\
        }\
    }\
testcase()\
');
(Reporter)

Comment 1

5 years ago
Created attachment 8339586 [details]
[crash-signature] Machine-readable crash signature
(Reporter)

Updated

5 years ago
Assignee: general → nobody
QA Contact: general
You need to log in before you can comment on or make changes to this bug.