Closed Bug 510783 Opened 15 years ago Closed 15 years ago

"Assertion failure: !(pn->pn_dflags & flag), at ../jsparse.h"

Categories

(Core :: JavaScript Engine, defect, P2)

defect

Tracking

()

RESOLVED FIXED
mozilla1.9.2
Tracking Status
status1.9.2 --- beta1-fixed
status1.9.1 --- wanted

People

(Reporter: gkw, Assigned: brendan)

References

Details

(Keywords: assertion, regression, testcase, Whiteboard: fixed-in-tracemonkey)

Attachments

(1 file)

function () { for (let[x] = ({ set s() { yield x = e }, l: x }) in []); } asserts js debug shell on TM branch without -j at Assertion failure: !(pn->pn_dflags & flag), at ../jsparse.h:664 autoBisect shows this is probably related to bug 496134 : The first bad revision is: changeset: 28945:2e6025415fb3 user: Brendan Eich date: Fri Jun 05 16:14:00 2009 -0700 summary: Fix destructuring binding to follow the cheezy dominance relation rules of the upvar analysis (496134, r=mrbkap).
Flags: blocking1.9.2?
Assignee: general → brendan
Status: NEW → ASSIGNED
Priority: -- → P2
Target Milestone: --- → mozilla1.9.2
Flags: blocking1.9.2? → blocking1.9.2+
Attached patch fix (deleted) — Splinter Review
Attachment #401361 - Flags: review?(mrbkap)
Attachment #401361 - Flags: review?(mrbkap) → review+
Whiteboard: fixed-in-tracemonkey
Followup, with r=mrbkap over irc: http://hg.mozilla.org/tracemonkey/rev/ebdcce1c4cb7 /be
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
blocking1.9.1: --- → ?
blocking1.9.1: ? → ---
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: