Closed Bug 1016564 Opened 11 years ago Closed 11 years ago

Assertion failure: body->isKind(PNK_LEXICALSCOPE), at frontend/ParseNode.h:763

Categories

(Core :: JavaScript Engine, defect)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 1065450
Tracking Status
firefox32 --- affected

People

(Reporter: decoder, Unassigned)

Details

(Keywords: assertion, testcase, Whiteboard: [jsbugmon:])

Attachments

(1 file)

The following testcase asserts on mozilla-central revision cbe4f69c2e9c (run with --fuzzing-safe): Reflect.parse("(for (x of []) (function*() { yield 1 }))");
Whiteboard: [jsbugmon:update,bisect]
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
Whiteboard: [jsbugmon:update] → [jsbugmon:update,bisect]
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
JSBugMon: The testcase found in this bug no longer reproduces (tried revision 15099ba111e8).
Whiteboard: [jsbugmon:update,ignore] → [jsbugmon:bisectfix]
Whiteboard: [jsbugmon:bisectfix] → [jsbugmon:]
JSBugMon: Fix Bisection requested, result: autoBisect shows this is probably related to the following changeset: The first good revision is: changeset: https://hg.mozilla.org/mozilla-central/rev/a5d074e91f7a user: Jason Orendorff date: Tue Sep 30 09:17:12 2014 -0500 summary: Bug 1065450 - Make Reflect.parse properly handle new-style array comprehensions and generator expressions. r=Waldo. This iteration took 543.314 seconds to run.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: