Closed
Bug 764790
Opened 12 years ago
Closed 12 years ago
IonMonkey: Assertion failure: [infer failure] Missing type pushed 0: string, at jsinfer.cpp:328
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 765479
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update] [js-triage-needed])
The following testcase asserts on ionmonkey revision 7ab88528503e (run with --ion -n -m --ion-eager):
try {
function exploreProperties(obj) {}
function boom() {
var [ a ] = "ABCDEFGHIJK";
exploreProperties(a);
}
boom();
} catch(exc1) {}
|
||
Updated•12 years ago
|
Whiteboard: [jsbugmon:update] → [jsbugmon:update] [js-triage-needed]
|
||
Updated•12 years ago
|
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE
|
||
Updated•11 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•