Subj : Re: JSVAL_IS_NUMBER(NaN) == TRUE (!?)
To   : netscape.public.mozilla.jseng
From : Rob Swindell
Date : Sun Feb 27 2005 10:18 pm


"Brendan Eich" <brendan@meer.net> wrote in message
news:422172CA.3020008@meer.net...
> Rob Swindell wrote:
> > I've upgraded to the latest code from cvs-mirror.mozilla.org
(JavaScript-C
> > 1.5 pre-release 6a 2004-06-09) and JS_ValueToInt32(jsval = NaN) is still
> > crashing the same way (assertion in jsopcode.c, line 1906):
> >
> >               case JSOP_GETARG:
> >                 atom = GetSlotAtom(jp, js_GetArgument, GET_ARGNO(pc));
> >                 LOCAL_ASSERT(atom); <--- asserting here
> >                 goto do_name;
>
>
> Argh, this isn't a bug that was fixed already.  Would you please file a
> new report with bugzilla.mozilla.org, product Core, component JavaScript
> Engine, assigned to me?  Thanks for your patience.  I understand the bug
> (it's in js_DecompileValueGenerator) and I'll have a patch soon.

Bug 284032 created.

-Rob

.