Closed
Bug 355105
Opened 18 years ago
Closed 18 years ago
"Assertion failure: count > 0" with "catch([] if true)"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: brendan)
References
Details
(Keywords: crash, testcase, verified1.8.1.1, Whiteboard: js1.7)
Attachments
(1 file)
|
1.15 KB,
patch
|
brendan
:
review+
dveditz
:
approval1.8.1.1+
|
Details | Diff | Splinter Review |
js> try { } catch([] if true) { } catch(x) { }
Assertion failure: count > 0, at jsemit.c:4737
Appears to be harmless in opt builds.
|
Assignee | |
Comment 1•18 years ago
|
||
I'll check this into the trunk. It should go into 1.8.1.1 and the js1.7src release.
/be
|
|
Assignee | |
Comment 2•18 years ago
|
||
Fixed on trunk:
Checking in jsemit.c;
/cvsroot/mozilla/js/src/jsemit.c,v <-- jsemit.c
new revision: 3.218; previous revision: 3.217
done
/be
Blocks: js1.7src
Status: ASSIGNED → RESOLVED
Closed: 18 years ago
Flags: blocking1.8.1.1?
Resolution: --- → FIXED
|
||
Comment 3•18 years ago
|
||
Checking in regress-355105.js;
/cvsroot/mozilla/js/tests/js1_7/lexical/regress-355105.js,v <-- regress-355105.js
initial revision: 1.1
done
Flags: in-testsuite+
|
||
Updated•18 years ago
|
Flags: blocking1.8.1.1? → blocking1.8.1.1+
Whiteboard: js1.7
|
|
||
Comment 5•18 years ago
|
||
Comment on attachment 240946 [details] [diff] [review]
update assertion to allow empty destructuring
approved for 1.8 branch, a=dveditz for drivers
Attachment #240946 -
Flags: approval1.8.1.1+
|
|
Assignee | |
Comment 6•18 years ago
|
||
Fixed on the 1.8 branch:
Checking in jsemit.c;
/cvsroot/mozilla/js/src/jsemit.c,v <-- jsemit.c
new revision: 3.128.2.57; previous revision: 3.128.2.56
done
/be
Keywords: fixed1.8.1.1
|
|
||
Comment 7•18 years ago
|
||
verified fixed 20061122 1.8.1.1 windows/linux/mac*, 1.9 windows/linux
Keywords: fixed1.8.1.1 → verified1.8.1.1
You need to log in
before you can comment on or make changes to this bug.
Description
•