349619 - Assertion [@ BindNameToSlot] with let block, object literal getter/setter

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect, P1)

Description

[Jesse Ruderman]

javascript:function() { let(y=3) { ({ get y() { }, set y(z) { } }) } }

Assertion failure: 0, at /Users/admin/trunk/mozilla/js/src/jsemit.c:1891

Comment 1

[Brendan Eich [:brendan]]

Attachment: fix

Comment 2

[Mike Shaver (:shaver emeritus)]

Comment on attachment 235179 [details] [diff] [review]
fix

r=shaver

Comment 3

[Brendan Eich [:brendan]]

Checking in jsemit.c;
/cvsroot/mozilla/js/src/jsemit.c,v  <--  jsemit.c
new revision: 3.186; previous revision: 3.185
done
Checking in jsparse.c;
/cvsroot/mozilla/js/src/jsparse.c,v  <--  jsparse.c
new revision: 3.209; previous revision: 3.208
done

Fixed on trunk.

/be

Comment 4

[Mike Beltzner [:beltzner, not reading bugmail]]

Comment on attachment 235179 [details] [diff] [review]
fix

a=beltzner on behalf of the 181drivers

Comment 5

[Brendan Eich [:brendan]]

Fixed on the 1.8 branch.

/be

Comment 6

[Bob Clary [:bc] (inactive)]

Checking in regress-349619.js;
/cvsroot/mozilla/js/tests/js1_7/block/regress-349619.js,v  <--  regress-349619.js
initial revision: 1.1

Comment 7

[Bob Clary [:bc] (inactive)]

verified fixed 1.8 20060827 windows/mac*/linux. 1.9 test run is still running..., I'll verify it later tonight.

Comment 8

[Bob Clary [:bc] (inactive)]

verified fixed 1.9 20060827 windows/mac*/linux