Closed Bug 1547915 Opened 6 months ago Closed 6 months ago

Assertion failure: length != 0, at js/src/frontend/TokenStream.cpp:81

Categories

(Core :: JavaScript Engine, defect, critical)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla68
Tracking Status
firefox-esr60 --- unaffected
firefox67 --- disabled
firefox68 --- fixed

People

(Reporter: gkw, Assigned: khyperia)

References

(Blocks 3 open bugs)

Details

(4 keywords, Whiteboard: [jsbugmon:])

Attachments

(2 files)

The following testcase crashes on mozilla-central revision 53014805c60b (build with --enable-debug --enable-more-deterministic, run with --fuzzing-safe --no-threads --no-baseline --no-ion --enable-experimental-fields):

// Adapted from randomly chosen test: js/src/tests/test262/language/statements/class/elements/multiple-definitions-rs-static-generator-method-privatename-identifier.js
#_\u200C

Backtrace:

#0 FindReservedWord<unsigned char> (s=<optimized out>, length=<optimized out>) at js/src/frontend/TokenStream.cpp:81
#1 0x00005628941d3b96 in FindReservedWord (str=<optimized out>, visibility=0x7ffc2b081cd4) at js/src/frontend/TokenStream.cpp:137
#2 0x00005628941d3c5e in js::frontend::ReservedWordTokenKind (str=0x7fe1e4a5f680 <_IO_2_1_stderr_>) at js/src/frontend/TokenStream.cpp:303
#3 0x00005628941470c5 in js::frontend::GeneralParser<js::frontend::FullParseHandler, char16_t>::checkLabelOrIdentifierReference (this=0x7ffc2b082f60, ident=0x3ce8b5c25700, offset=168, yieldHandling=js::frontend::YieldIsName, hint=js::frontend::TokenKind::Limit) at /home/ubuntu/shell-cache/js-dbg-64-dm-linux-x86_64-53014805c60b/objdir-js/dist/include/js/RootingAPI.h:1031
#4 0x00005628941473fe in js::frontend::GeneralParser<js::frontend::FullParseHandler, char16_t>::labelOrIdentifierReference (this=0x7ffc2b082f60, yieldHandling=js::frontend::YieldIsName) at js/src/frontend/Parser.cpp:9253
/snip

For detailed crash information, see attachment.

This seems to have existed since m-c rev 7a1ad6647c22 :

https://hg.mozilla.org/mozilla-central/rev/7a1ad6647c22

Setting needinfo? from Ashley...

Flags: needinfo?(khyperia)
Flags: needinfo?(khyperia)
Pushed by ahauck@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/511bea792d70
Correctly handle private identifiers with escapes. r=jorendorff
Status: NEW → RESOLVED
Closed: 6 months ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla68
Assignee: nobody → khyperia
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.