Updates:
Cc: [email protected]
Comment #3 on issue 1587 by [email protected]: Top renderer crash in
object lookup - beta blocker
http://code.google.com/p/v8/issues/detail?id=1587
This might be caused by:
http://code.google.com/p/v8/issues/detail?id=1583
function f() {
var x = { a: 'hest' };
var y = { a: 'fisk' };
var z = { a: 'svin' };
try {
throw "";
} catch (e) {
x.f = function (e) {
print(x.a);
print(y.a);
print(z.a);
};
}
return x;
}
will crash with holder != NULL assertion failure on 3.4 (m14) and bleeding
edge V8
Kevin is working on the fix.
JQuery seems to contain similar piece of code. I'll see whether it can be
reduced to reproduce the failure.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
