Closed
Bug 695647
Opened 14 years ago
Closed 4 years ago
Assertion failure: js_CheckForStringIndex(ida->vector[n]) == ida->vector[n], at jsapi.cpp:4002
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: decoder, Unassigned)
Details
(Keywords: assertion, testcase, Whiteboard: js-triage-needed)
The following test asserts in Firefox nightly 2011-10-12 (built from revision 46a6d0fd13d5):
<form id="form1">
<input form='form1' type="input" value="10"/>
<script>
var form1 = document.getElementById("form1");
</script>
<script type="text/javascript">
({ native : this }) ();
</script>
Could be related to bug 569024 but does not involve uneval.
|
||
Comment 1•14 years ago
|
||
Calling the object ({ native : this }) will call either uneval or DVG while trying to produce an error message. So this could be a dup of bug 569024, depending on the stack.
|
Assignee | |
Updated•11 years ago
|
Assignee: general → nobody
|
||
Comment 2•4 years ago
|
||
Hey Christian,
Can you still reproduce this issue or should we close it?
Flags: needinfo?(choller)
|
Reporter | |
Updated•4 years ago
|
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
|
|
Reporter | |
Updated•4 years ago
|
Flags: needinfo?(choller)
You need to log in
before you can comment on or make changes to this bug.
Description
•