1459454 - Assertion failure: cx_->isExceptionPending(), at js/src/frontend/BytecodeCompiler.cpp:588

Status: RESOLVED DUPLICATE of bug 1459258

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

The following testcase crashes on mozilla-central revision a91ca6e5ca82 (build with --enable-debug --enable-more-deterministic, run with --fuzzing-safe --no-threads --no-baseline --no-ion):

oomTest(function() {
    z(g)
    h["le"] = ''
    d["c"]
    s["ii"] = j(i in th)
    g1
    o("/" ({
        l: ed,
        f: 'ev',
        l2,
        e,
        v: u
    }))(t, "a")
})

Backtrace:

<no backtrace was available>

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: Detailed Crash Information

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

autobisectjs shows this is probably related to the following changeset:

The first bad revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/ce42829bf948
user:        Jan de Mooij
date:        Thu May 03 16:17:09 2018 +0200
summary:     Bug 1458198 - Assert the frontend reported an exception if it fails to compile a script. r=jorendorff

Jan, is bug 1458198 a likely regressor?

Comment 3

[Christian Holler (:decoder)]

Likely a duplicate of bug 1459258.

Comment 4

[Jan de Mooij [:jandem]]

Yes I have a patch for bug 1459258 that fixes this one too.