Closed
Bug 350692
Opened 19 years ago
Closed 19 years ago
import x['y']['z']; causes "Assertion failure: pn->pn_op == JSOP_GETELEM" [@ EmitElemOp]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: brendan)
Details
(Keywords: crash, testcase, verified1.8.1)
Crash Data
Attachments
(1 file)
|
951 bytes,
patch
|
brendan
:
review+
|
Details | Diff | Splinter Review |
javascript:import x['y']['z'];
Assertion failure: pn->pn_op == JSOP_GETELEM,
at [@ EmitElemOp] jsemit.c:2343
| Assignee | ||
Comment 1•19 years ago
|
||
r=me for assertion fix.
/be
| Assignee | ||
Comment 2•19 years ago
|
||
Fixed on trunk and 1.8 branch.
/be
Comment 3•19 years ago
|
||
Checking in regress-350692.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-350692.js,v <-- regress-350692.js
initial revision: 1.1
Flags: in-testsuite+
Comment 4•19 years ago
|
||
verified fixed 1.8, 1.9 20060831 windows/mac*/linux
tweaked test to catch undefined x exception
Checking in regress-350692.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-350692.js,v <-- regress-350692.js
new revision: 1.2; previous revision: 1.1
Status: RESOLVED → VERIFIED
Keywords: fixed1.8.1 → verified1.8.1
| Assignee | ||
Comment 5•19 years ago
|
||
Or you could fake up x = {y: {z: function (){}}}; and import that, but you'd then get a TypeError: x["y"]["z"] is not exported -- could be easier to catch while avoiding catching and ignoring other exceptions that should not be ignored, in case there's a regression.
/be
Comment 6•19 years ago
|
||
Checking in regress-350692.js;
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-350692.js,v <-- regress-350692.js
new revision: 1.3; previous revision: 1.2
done
Thanks for the pointer.
Updated•14 years ago
|
Crash Signature: [@ EmitElemOp]
You need to log in
before you can comment on or make changes to this bug.
Description
•