290499 - E4X: Spidermonkey shell crashes on empty XMLList intializer

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P1)

Description

[Martin Honnen]

I think an empty XMLList intializer in the form of
  <></>
is allowed so
  var emptyList = <></>;
should be parsed without problems and create an empty XMLList but the
Spidermonkey shell crashes:

js> var emptyList = <></>;
Assertion failure: pn->pn_count != 0, at jsparse.c:4736

Rhino creates an empty list.

Comment 1

[Bob Clary [:bc] (inactive)]

Attachment: mozilla/js/tests/e4x/Regress/regress-290499.js

/cvsroot/mozilla/js/tests/e4x/Regress/regress-290499.js,v  <-- 
regress-290499.js
initial revision: 1.1

Comment 2

[Brendan Eich [:brendan]]

Attachment: proposed fix

I need an e4x code buddy....

/be

Comment 3

[Brendan Eich [:brendan]]

Fixed.

/be

Comment 4

[Bob Clary [:bc] (inactive)]

Checking in regress-290499.js;
/cvsroot/mozilla/js/tests/e4x/Regress/regress-290499.js,v  <--  regress-290499.js
new revision: 1.3; previous revision: 1.2

add missing call to TEST()

verified fixed.