Subj : Re: JSVAL_IS_NUMBER(NaN) == TRUE (!?)
To   : Rob Swindell
From : Brendan Eich
Date : Sat Feb 26 2005 11:12 pm

Rob Swindell wrote:
> I've upgraded to the latest code from cvs-mirror.mozilla.org (JavaScript-C
> 1.5 pre-release 6a 2004-06-09) and JS_ValueToInt32(jsval = NaN) is still
> crashing the same way (assertion in jsopcode.c, line 1906):
> 
>               case JSOP_GETARG:
>                 atom = GetSlotAtom(jp, js_GetArgument, GET_ARGNO(pc));
>                 LOCAL_ASSERT(atom); <--- asserting here
>                 goto do_name;


Argh, this isn't a bug that was fixed already.  Would you please file a 
new report with bugzilla.mozilla.org, product Core, component JavaScript 
Engine, assigned to me?  Thanks for your patience.  I understand the bug 
(it's in js_DecompileValueGenerator) and I'll have a patch soon.

/be

.