Status: Assigned
Owner: [email protected]
Labels: Type-Bug Priority-Medium

New issue 2297 by [email protected]: Position change array when patching in LiveEdit is not checked to be smi only.
http://code.google.com/p/v8/issues/detail?id=2297

The following test case crashes in some cases in release mode and triggers assertion failures in debug mode:

Debug = debug.Debug;
var f = eval("(function() { return ''; })");
var script = Debug.findScript(f);
Debug.setScriptBreakPointById(script.id, 1, 0);
var change_log = new Array();
Debug.LiveEdit.TestApi.ApplySingleChunkPatch(script, -1, "", "", change_log);
assertThrows(f());

--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to