Closed Bug 585392 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: !regstate[reg].fe,"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 585408

People

(Reporter: gkw, Unassigned)

References

Details

(Keywords: assertion, regression, testcase) 

for (let c in []) {
    c << c++
}

asserts js debug shell on JM changeset 787e35063545 with -m at Assertion failure: !regstate[reg].fe, at ../methodjit/FrameState-inl.h:633
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
A testcase for this bug was already added in the original bug (bug 585408).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.