Summary: | REGRESSION(r27022): testapi exits with assertion failure in debug build: ASSERTION FAILED: s <= HeapConstants<heapType>::cellSize | ||
---|---|---|---|
Product: | WebKit | Reporter: | Mark Rowe (bdash) <mrowe> |
Component: | JavaScriptCore | Assignee: | Mark Rowe (bdash) <mrowe> |
Status: | RESOLVED FIXED | ||
Severity: | Normal | Keywords: | HasReduction, InRadar, Regression |
Priority: | P1 | ||
Version: | 528+ (Nightly build) | ||
Hardware: | Mac | ||
OS: | OS X 10.5 |
Description
Mark Rowe (bdash)
2007-11-17 16:38:58 PST
The fix to this is probably going to be to remove the m_isInitialized member of JSCallbackObject. Geoff mentioned the following in the patch review that added that member: > A solution to this problem that would avoid the awkwardness of double initializaiton, > fix <rdar://problem/5440659>, and avoid taking the precious last 4 bytes away from > JSCallbackObject would be to refactor Interpreter so that construction and global > object initialization were two separate steps (i.e., remove the JSObject* parameter to > Interpreter::Interpreter()). > > That way, you could make an interpreter, use it to construct the global object, and > then assign the global object to the interpreter. |