Closed
Bug 379860
Opened 17 years ago
Closed 17 years ago
js1_7/lexical/regress-346642-03.js Assertion failure: OBJ_BLOCK_DEPTH(cx, obj) == pcdepth
Categories
(Core :: JavaScript Engine, defect, P1)
Core
JavaScript Engine
Tracking
()
VERIFIED
FIXED
mozilla1.9alpha5
People
(Reporter: bc, Assigned: brendan)
References
Details
(Keywords: assertion, crash, regression)
Attachments
(1 file)
|
1.03 KB,
patch
|
igor
:
review+
|
Details | Diff | Splinter Review |
js1_7/lexical/regress-346642-03.js Assertion failure: OBJ_BLOCK_DEPTH(cx, obj) == pcdepth, at jsopcode.c:4862 bug 375794 regressed this.
|
Assignee | |
Comment 1•17 years ago
|
||
Any pop whose stack effects are modeled, during straight-line abstract interpretation by the decompiler, by definition can't be SRC_HIDDEN. /be
|
|
Assignee | |
Updated•17 years ago
|
Priority: -- → P1
Hardware: PC → All
Target Milestone: --- → mozilla1.9alpha5
|
||
Updated•17 years ago
|
Attachment #263902 -
Flags: review?(igor) → review+
|
|
Assignee | |
Comment 2•17 years ago
|
||
Fixed on trunk: js/src/jsemit.c 3.247 /be
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
|
Reporter | |
Updated•17 years ago
|
Flags: in-testsuite+
|
|
Reporter | |
Comment 3•17 years ago
|
||
verified assert fixed 2007-05-07 1.9.0 shell/browser windows/linux/mac*
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•