js> for (var i=0; i<2; ++i) ({ p: 5, p: 7 }); Assertion failure: sprop->parent == scope->lastProp, at jsinterp.c:5946 This is a recent regression. I'm guessing it's a regression from bug 129496, since the assertion was added there. I convinced myself that this seems harmless in opt builds using a slightly more complicated script that checks the constructed objects. In opt builds, it outputs "({p:7})" twice; in debug builds, it outputs "({p:7})" once and then asserts. function g() { for (var i=0; i<2; ++i) yield ({ p: 5, p: 7 }); } var iter = g(); print(uneval(iter.next())); print(uneval(iter.next()));

Easy to fix, benign (a strict warning). Must fix assertions pronto. /be

Comment on attachment 305962 [details] [diff] [review] take the slow path if we detect a dup r=shaver

Comment on attachment 305962 [details] [diff] [review] take the slow path if we detect a dup There may be more bad here, need to write a test. But we don't need the assertbotch in b4. /be

Comment on attachment 305962 [details] [diff] [review] take the slow path if we detect a dup a1.9b4=beltzner

Fixed: js/src/jsinterp.c 3.447 /be

/cvsroot/mozilla/js/tests/js1_5/Regress/regress-419803.js,v <-- regress-419803.js initial revision: 1.1 /cvsroot/mozilla/js/tests/js1_7/regress/regress-419803.js,v <-- regress-419803.js initial revision: 1.1

v