Closed Bug 985029 Opened 11 years ago Closed 10 years ago

Assertion failure: ToInteger(t) == t [@WeekDay] [@DateObject::fillLocalTimeSlots]

Categories

(Core :: JavaScript Engine, defect)

x86_64
Windows 8.1
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 977403

People

(Reporter: bent.mozilla, Unassigned)

Details

Here |t| is NaN: mozjs.dll!WeekDay(double t) Line 278 C++ > mozjs.dll!js::DateObject::fillLocalTimeSlots(js::DateTimeInfo * dtInfo) Line 1352 C++ mozjs.dll!js::DateObject::getFullYear_impl(JSContext * cx, JS::CallArgs args) Line 1426 C++ mozjs.dll!JS::CallNonGenericMethod<&IsDate,&js::DateObject::getFullYear_impl>(JSContext * cx, JS::CallArgs args) Line 100 C++ mozjs.dll!date_getFullYear(JSContext * cx, unsigned int argc, JS::Value * vp) Line 1434 C++ mozjs.dll!js::CallJSNative(JSContext * cx, bool (JSContext *, unsigned int, JS::Value *) * native, const JS::CallArgs & args) Line 239 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 476 C++ mozjs.dll!Interpret(JSContext * cx, js::RunState & state) Line 2614 C++ mozjs.dll!js::RunScript(JSContext * cx, js::RunState & state) Line 423 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 495 C++ mozjs.dll!js::Invoke(JSContext * cx, const JS::Value & thisv, const JS::Value & fval, unsigned int argc, const JS::Value * argv, JS::MutableHandle<JS::Value> rval) Line 532 C++ mozjs.dll!js::DirectProxyHandler::call(JSContext * cx, JS::Handle<JSObject *> proxy, const JS::CallArgs & args) Line 465 C++ mozjs.dll!js::CrossCompartmentWrapper::call(JSContext * cx, JS::Handle<JSObject *> wrapper, const JS::CallArgs & args) Line 465 C++ mozjs.dll!js::Proxy::call(JSContext * cx, JS::Handle<JSObject *> proxy, const JS::CallArgs & args) Line 2637 C++ mozjs.dll!js::proxy_Call(JSContext * cx, unsigned int argc, JS::Value * vp) Line 3040 C++ mozjs.dll!js::CallJSNative(JSContext * cx, bool (JSContext *, unsigned int, JS::Value *) * native, const JS::CallArgs & args) Line 239 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 469 C++ mozjs.dll!Interpret(JSContext * cx, js::RunState & state) Line 2614 C++ mozjs.dll!js::RunScript(JSContext * cx, js::RunState & state) Line 423 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 495 C++ mozjs.dll!js::Invoke(JSContext * cx, const JS::Value & thisv, const JS::Value & fval, unsigned int argc, const JS::Value * argv, JS::MutableHandle<JS::Value> rval) Line 532 C++ mozjs.dll!js::InvokeGetterOrSetter(JSContext * cx, JSObject * obj, JS::Value fval, unsigned int argc, JS::Value * argv, JS::MutableHandle<JS::Value> rval) Line 604 C++ mozjs.dll!js::Shape::get(JSContext * cx, JS::Handle<JSObject *> receiver, JSObject * obj, JSObject * pobj, JS::MutableHandle<JS::Value> vp) Line 46 C++ mozjs.dll!NativeGetInline<1>(JSContext * cx, JS::Handle<JSObject *> obj, JS::Handle<JSObject *> receiver, JS::Handle<JSObject *> pobj, JS::Handle<js::Shape *> shape, JS::MutableHandle<JS::Value> vp) Line 4341 C++ mozjs.dll!GetPropertyHelperInline<1>(JSContext * cx, JS::Handle<JSObject *> obj, JS::Handle<JSObject *> receiver, JS::Handle<jsid> id, JS::MutableHandle<JS::Value> vp) Line 4534 C++ mozjs.dll!js::baseops::GetProperty(JSContext * cx, JS::Handle<JSObject *> obj, JS::Handle<JSObject *> receiver, JS::Handle<jsid> id, JS::MutableHandle<JS::Value> vp) Line 4544 C++ mozjs.dll!JSObject::getGeneric(JSContext * cx, JS::Handle<JSObject *> obj, JS::Handle<JSObject *> receiver, JS::Handle<jsid> id, JS::MutableHandle<JS::Value> vp) Line 1001 C++ mozjs.dll!GetPropertyOperation(JSContext * cx, js::StackFrame * fp, JS::Handle<JSScript *> script, unsigned char * pc, JS::MutableHandle<JS::Value> lval, JS::MutableHandle<JS::Value> vp) Line 266 C++ mozjs.dll!Interpret(JSContext * cx, js::RunState & state) Line 2409 C++ mozjs.dll!js::RunScript(JSContext * cx, js::RunState & state) Line 423 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 495 C++ mozjs.dll!js::CallOrConstructBoundFunction(JSContext * cx, unsigned int argc, JS::Value * vp) Line 1282 C++ mozjs.dll!js::CallJSNative(JSContext * cx, bool (JSContext *, unsigned int, JS::Value *) * native, const JS::CallArgs & args) Line 239 C++ mozjs.dll!js::Invoke(JSContext * cx, JS::CallArgs args, js::MaybeConstruct construct) Line 476 C++ mozjs.dll!js::Invoke(JSContext * cx, const JS::Value & thisv, const JS::Value & fval, unsigned int argc, const JS::Value * argv, JS::MutableHandle<JS::Value> rval) Line 532 C++ mozjs.dll!JS_CallFunctionValue(JSContext * cx, JS::Handle<JSObject *> obj, JS::Handle<JS::Value> fval, const JS::HandleValueArray & args, JS::MutableHandle<JS::Value> rval) Line 4897 C++ xul.dll!nsXPCWrappedJSClass::CallMethod(nsXPCWrappedJS * wrapper, unsigned short methodIndex, const XPTMethodDescriptor * info_, nsXPTCMiniVariant * nativeParams) Line 1273 C++ xul.dll!nsXPCWrappedJS::CallMethod(unsigned short methodIndex, const XPTMethodDescriptor * info, nsXPTCMiniVariant * params) Line 518 C++ xul.dll!PrepareAndDispatch(nsXPTCStubBase * self, unsigned int methodIndex, unsigned int * args, unsigned int * stackBytesToPop) Line 85 C++ xul.dll!SharedStub() Line 113 C++ xul.dll!nsTimerImpl::Fire() Line 555 C++ xul.dll!nsTimerEvent::Run() Line 637 C++ xul.dll!nsThread::ProcessNextEvent(bool mayWait, bool * result) Line 694 C++ xul.dll!NS_ProcessNextEvent(nsIThread * thread, bool mayWait) Line 263 C++ xul.dll!mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate * aDelegate) Line 136 C++ xul.dll!MessageLoop::RunInternal() Line 227 C++ xul.dll!MessageLoop::RunHandler() Line 220 C++ xul.dll!MessageLoop::Run() Line 194 C++ xul.dll!nsBaseAppShell::Run() Line 166 C++ xul.dll!nsAppShell::Run() Line 165 C++ xul.dll!nsAppStartup::Run() Line 276 C++ xul.dll!XREMain::XRE_mainRun() Line 4010 C++ xul.dll!XREMain::XRE_main(int argc, char * * argv, const nsXREAppData * aAppData) Line 4079 C++ xul.dll!XRE_main(int argc, char * * argv, const nsXREAppData * aAppData, unsigned int aFlags) Line 4291 C++ firefox.exe!do_main(int argc, char * * argv, nsIFile * xreDirectory) Line 282 C++ firefox.exe!NS_internal_main(int argc, char * * argv) Line 643 C++ firefox.exe!wmain(int argc, wchar_t * * argv) Line 105 C++ firefox.exe!__tmainCRTStartup() Line 623 C firefox.exe!wmainCRTStartup() Line 466 C kernel32.dll!@BaseThreadInitThunk@12() Unknown ntdll.dll!__RtlUserThreadStart() Unknown ntdll.dll!__RtlUserThreadStart@8() Unknown
This is a dup of a bug filed by khuey recently, that I haven't been able to get to because pwn2own. Can't search for it now, still busy with security things now.
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.