349962 - Assertion: "OBJ_GET_CLASS(cx, parent) != &js_BlockClass" in jsinterp.c

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

Steps to reproduce:
  In a debug build,
  javascript:(function() { let z = (function () { function a() { } })(); })()

Result:
  Assertion failure: OBJ_GET_CLASS(cx, parent) != &js_BlockClass, 
  at js/src/jsinterp.c:5001

Comment 1

[Brendan Eich [:brendan]]

Attachment: remove bogus assertions

These assertions went in with the "first big wave of js1.7 changes", thanks to me, but I don't recall their rationale.  They are obviously wrong in light of cloned block objects on the scope chain.  I'm looking for an r=mrbkap to check this debug only change into trunk and 1.8 branch.

/be

Comment 2

[Brendan Eich [:brendan]]

Fixed on trunk and 1.8 branch.

/be

Comment 3

[Bob Clary [:bc] (inactive)]

Checking in regress-349962.js;
/cvsroot/mozilla/js/tests/js1_7/block/regress-349962.js,v  <--  regress-349962.js
initial revision: 1.1

Comment 4

[Bob Clary [:bc] (inactive)]

verified fixed 1.8 1.9 20060901 windows/mac*/linux