[Webkit-unassigned] [Bug 19024] SQUIRRELFISH: ASSERTION FAILED: activation->isActivationObject() in Machine::unwindCallFrame

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon May 12 22:41:49 PDT 2008


http://bugs.webkit.org/show_bug.cgi?id=19024


cwzwarich at uwaterloo.ca changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #21100|0                           |1
        is obsolete|                            |




------- Comment #4 from cwzwarich at uwaterloo.ca  2008-05-12 22:41 PDT -------
Created an attachment (id=21101)
 --> (http://bugs.webkit.org/attachment.cgi?id=21101&action=view)
Further reduction

Here's a further reduction. This one doesn't trigger the same assertion.
Instead, it hits this assertion:

ASSERTION FAILED: isNumber(v)
(/Users/Cameron/sf/JavaScriptCore/kjs/JSImmediate.cpp:44 static KJS::JSObject*
KJS::JSImmediate::toObject(const KJS::JSValue*, KJS::ExecState*))


-- 
Configure bugmail: http://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list