[Webkit-unassigned] [Bug 16033] REGRESSION(r27022): testapi exits with assertion failure in debug build: ASSERTION FAILED: s <= HeapConstants<heapType>::cellSize

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sat Nov 17 17:00:02 PST 2007


http://bugs.webkit.org/show_bug.cgi?id=16033





------- Comment #1 from mrowe at apple.com  2007-11-17 17:00 PDT -------
The fix to this is probably going to be to remove the m_isInitialized member of
JSCallbackObject.  Geoff mentioned the following in the patch review that added
that member:

> A solution to this problem that would avoid the awkwardness of double initializaiton,
> fix <rdar://problem/5440659>, and avoid taking the precious last 4 bytes away from
> JSCallbackObject would be to refactor Interpreter so that construction and global
> object initialization were two separate steps (i.e., remove the JSObject* parameter to
> Interpreter::Interpreter()). 
>
> That way, you could make an interpreter, use it to construct the global object, and
> then assign the global object to the interpreter.


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list