352640 - Crash [@ js_LexicalLookup] with do..while, with, let

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Jesse Ruderman]

js> new Function("do { with({}) let x; let b; } while( 1 );")                  
Assertion failure: scopeStmt, at jsparse.c:3570

js> new Function("do { with({}) let x; var b; } while( 1 );")
Crash [@ js_LexicalLookup]

js> new Function("do { with({}) let x; [2 for each (b in [])]; } while( 1 );")
Crash [@ js_LexicalLookup]

Comment 1

[Jesse Ruderman]

Also:

js> new Function("switch(w) { case 2: with({}) let y; case 3: }")

Comment 2

[Jesse Ruderman]

Seems like a null deref in opt builds.  Odd that the second one in comment 0 crashes in debug but not in opt, though.

Comment 3

[Jesse Ruderman]

WFM on trunk (even without the "destructuring decompilation" (v5d) patch from bug 346642).

Comment 4

[Bob Clary [:bc] (inactive)]

/cvsroot/mozilla/js/tests/js1_7/regress/regress-352640-01.js,v  <--  regress-352640-01.js
initial revision: 1.1

/cvsroot/mozilla/js/tests/js1_7/regress/regress-352640-02.js,v  <--  regress-352640-02.js
initial revision: 1.1

/cvsroot/mozilla/js/tests/js1_7/regress/regress-352640-03.js,v  <--  regress-352640-03.js
initial revision: 1.1

/cvsroot/mozilla/js/tests/js1_7/regress/regress-352640-04.js,v  <--  regress-352640-04.js
initial revision: 1.1