716733 - Crash [@ strlen] or [@ PopOffPrec] or "Assertion failure: ss->printer->pcstack,"

Status: RESOLVED DUPLICATE of bug 716713

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

(function() {
    switch ('') {
    case (( * )()):
    }
}).g()

asserts js debug shell on m-c changeset c713003d3226 without any CLI arguments at Assertion failure: ss->printer->pcstack, and crashes js opt shell at strlen, and with PopOffPrec somewhere on the stack too.

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   84036:7ab4f1ebc7cc
user:        Brian Hackett
date:        Mon Jan 09 06:29:50 2012 -0800
summary:     Backout 54cd89b0f1fa (bug 712714 backout).  Talos will probably report fake regressions for this patch, do not back out for this reason.

s-s because the testcase tries to access memory address 0x40977460.