1053132 - stopping generators cause Firefox to freeze (unresponsive script dialog)

Status: RESOLVED DUPLICATE of bug 1012480

(Core :: JavaScript Engine, defect)

Description

[Frederik Braun [:freddy]]

Code snippet:
> g= function* () { var x = 5; while (x < 3) { yield x--; } }; l=g(); for (element in l) { console.log(element) }


Tim Taubert (CCd) says this is relevant:
> Assertion failure: cx->iterValue.isMagic(JS_NO_ITER_VALUE), at 
 /Users/tim/workspace/mozilla-central/js/src/vm/Interpreter.cpp:434

I get this on release & nightly, Mac and Linux.

Comment 1

[Tim Taubert [:ttaubert] (inactive)]

https://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=3e40f7389d1b&tochange=44ba69cacd7e

Should have been regressed by bug 958951.

Comment 2

[Tooru Fujisawa [:arai]]

Seems to be dupe of bug 1012480.
  [x for (x in function*(){}())]

Need to backport to esr31?

Comment 3

[Tooru Fujisawa [:arai]]

Attachment: Do not treat star generator's iterator as legacy generator's iterator in for..in loop. r=jorendorff

Confirmed the patch for bug 1012480 fixes this, it's landed to mozilla34.
Exactly same patch is applicable to esr31,