Comment #1 on issue 192 by nth10sd: CHECK(result !=
Top::has_pending_exception()) failed
http://code.google.com/p/v8/issues/detail?id=192
Another smaller testcase:
(function(){ arguments.__proto__.__defineGetter__("foo", function(){}); })()
({ foo: [].map() })
===
$ ./shell_g
V8 version 0.4.8 (candidate)
> (function(){ arguments.__proto__.__defineGetter__("foo", function(){});
})()
({ foo: [].map() })
>
#
# Fatal error in src/handles.cc, line 431
# CHECK(result != Top::has_pending_exception()) failed
#
==== Stack trace ============================================
2: arguments adaptor frame: 0->2
Security context: 0x1c0d449 <JS Object>#0#
3: /* anonymous */(this=0x1c0d47d <JS Global Object>#1#)
==== Details ================================================
[2]: arguments adaptor frame: 0->2 {
}
[3]: /* anonymous */(this=0x1c0d47d <JS Global Object>#1#) {
// stack-allocated locals
var .result = 0x1e00135 <undefined>
// expression stack (top to bottom)
[03] : 0x1e04965 <String[3]: map>
[02] : 0x181ffed <an Object>>#2#
[01] : 0x181ffed <an Object>>#2#
--------- s o u r c e c o d e ---------
({ foo: [].map() })?
-----------------------------------------
}
==== Key ============================================
#0# 0x1c0d449: 0x1c0d449 <JS Object>
NaN: 0x1e03e4d <Number: nan>
Math: 0x180ed29 <a MathConstructor>>#3#
Infinity: 0x1e04111 <Number: inf>
undefined: 0x1e00135 <undefined>
#1# 0x1c0d47d: 0x1c0d47d <JS Global Object>
#2# 0x181ffed: 0x181ffed <an Object>>
#3# 0x180ed29: 0x180ed29 <a MathConstructor>>
E: 0x1e05695 <Number: 2.718281828459045>
PI: 0x1e05715 <Number: 3.141592653589793>
LN2: 0x1e056c5 <Number: 0.6931471805599453>
LN10: 0x1e056ad <Number: 2.302585092994046>
SQRT2: 0x1e0574d <Number: 1.414213562373095>
LOG2E: 0x1e056e1 <Number: 1.442695040888963>
LOG10E: 0x1e056fd <Number: 0.4342944819032518>
SQRT1_2: 0x1e05731 <Number: 0.7071067811865476>
=====================
Abort trap
$ svn log | head
------------------------------------------------------------------------
r1081 | [email protected] | 2009-01-15 21:09:23 +0800 (Thu, 15 Jan 2009)
| 1 line
Lint error.
------------------------------------------------------------------------
r1080 | [email protected] | 2009-01-15 20:45:48 +0800 (Thu, 15 Jan 2009)
| 3 lines
Noone really liked the name "GenerationVariant" so here it gets renamed
to "Trace".
Review URL: http://codereview.chromium.org/18091
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
-~----------~----~----~----~------~----~------~--~---
