Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-13 21:35:39 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 532363 - TM: "Assertion failure: IsDenseArrayId(cx, obj, (jsid) prop), at ../jsarray.cpp". r=bzbarsky.

Browse Source
This commit is contained in:
Jason Orendorff 2009-12-04 15:38:25 -06:00
parent 750ad4fcf1
commit 45131911f5
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
js/src/jstracer.cpp
View File

@ -11626,7 +11626,7 @@ GetPropertyWithNativeGetter(JSContext* cx, JSObject* obj, JSScopeProperty* sprop
JSObject* pobj;
JS_ASSERT(obj->lookupProperty(cx, sprop->id, &pobj, &prop));
JS_ASSERT(prop == (JSProperty*) sprop);
obj->dropProperty(cx, prop);
pobj->dropProperty(cx, prop);
#endif
// JSScopeProperty::get contains a special case for With objects. We can

2
js/src/trace-test/tests/basic/testBug532363.js Normal file
View File

@ -0,0 +1,2 @@
for (var i = 0; i < 9; i++)
({__parent__: []} = []);