Closed Bug 350253 Opened 18 years ago Closed 18 years ago

"(g()) = 3" causes "Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL" [@ AssignExpr]

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
VERIFIED FIXED

People

(Reporter: jruderman, Assigned: brendan)

Details

(Keywords: crash, testcase, verified1.8.1)

Crash Data

Attachments

(1 file)

fix bogus assertion
952 bytes, patch
Details | Diff | Splinter Review 
javascript:(g()) = 3;

Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL, 
at jsparse.c:3688
DEBUG-only change, I'm checking into the trunk and branch.

/be
Assignee: general → brendan
Status: NEW → ASSIGNED
Fixed.

/be
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Keywords: fixed1.8.1
Resolution: --- → FIXED
Checking in regress-350253.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-350253.js,v  <--  regress-350253.js
initial revision: 1.1
done
Flags: in-testsuite+
verified fixed 1.8 20060827 windows/mac*/linux
Keywords: fixed1.8.1 → verified1.8.1
OS: Mac OS X 10.4 → All
Hardware: Macintosh → All
verified fixed 1.9 20060827 windows/mac*/linux
Status: RESOLVED → VERIFIED
Crash Signature: [@ AssignExpr]
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: