Closed
Bug 1091757
Opened 11 years ago
Closed 11 years ago
Assertion failure: !(*this)->aliased(), at jsscript.h
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla36
Tracking | Status | |
---|---|---|
firefox36 | --- | affected |
People
(Reporter: gkw, Assigned: jandem)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
1.29 KB,
patch
|
shu
:
review+
|
Details | Diff | Splinter Review |
(function() {
let x = let(z = function() {}) x
function f(y = f) {}
})()
asserts js debug shell on m-c changeset 80e18ff7c7b2 with --no-ion --no-threads at Assertion failure: !(*this)->aliased(), at jsscript.h.
Debug configure options:
CC="clang -Qunused-arguments" CXX="clang++ -Qunused-arguments" AR=ar AUTOCONF=/usr/local/Cellar/autoconf213/2.13/bin/autoconf213 sh /Users/skywalker/trees/mozilla-central/js/src/configure --target=x86_64-apple-darwin12.5.0 --enable-debug --enable-optimize --enable-nspr-build --enable-more-deterministic --with-ccache --enable-gczeal --enable-debug-symbols --disable-tests
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: https://hg.mozilla.org/mozilla-central/rev/75de7e0fe086
user: Jan de Mooij
date: Wed Oct 29 13:49:20 2014 +0100
summary: Bug 1090491 - Don't allocate stack slots for aliased locals. r=luke
Jan, is bug 1090491 a possible regressor?
Flags: needinfo?(jdemooij)
Assignee | ||
Comment 1•11 years ago
|
||
ReportUninitializedLexical calls bi.frameIndex(), but that's no longer valid for aliased locals. In this case we know the binding we're looking for is not aliased, so we can just check for that.
Assignee: nobody → jdemooij
Status: NEW → ASSIGNED
Flags: needinfo?(jdemooij)
Attachment #8514565 -
Flags: review?(shu)
Updated•11 years ago
|
Attachment #8514565 -
Flags: review?(shu) → review+
Assignee | ||
Comment 2•11 years ago
|
||
Comment 3•11 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla36
You need to log in
before you can comment on or make changes to this bug.
Description
•