Closed Bug 350253 Opened 14 years ago Closed 14 years ago

"(g()) = 3" causes "Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL" [@ AssignExpr]

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
critical

Tracking

()

VERIFIED FIXED

People

(Reporter: jruderman, Assigned: brendan)

Details

(Keywords: crash, testcase, verified1.8.1)

Crash Data

Attachments

(1 file)

javascript:(g()) = 3;

Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL, 
at jsparse.c:3688
DEBUG-only change, I'm checking into the trunk and branch.

/be
Assignee: general → brendan
Status: NEW → ASSIGNED
Fixed.

/be
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Keywords: fixed1.8.1
Resolution: --- → FIXED
Checking in regress-350253.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-350253.js,v  <--  regress-350253.js
initial revision: 1.1
done
Flags: in-testsuite+
verified fixed 1.8 20060827 windows/mac*/linux
OS: Mac OS X 10.4 → All
Hardware: Macintosh → All
verified fixed 1.9 20060827 windows/mac*/linux
Status: RESOLVED → VERIFIED
Crash Signature: [@ AssignExpr]
You need to log in before you can comment on or make changes to this bug.