Crash with "var x; while(x getter={});" in opt build

VERIFIED WORKSFORME

Status

()

Core
JavaScript Engine
--
critical
VERIFIED WORKSFORME
10 years ago
5 years ago

People

(Reporter: gkw, Unassigned)

Tracking

({assertion, crash, testcase})

Trunk
x86
Mac OS X
assertion, crash, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

10 years ago
js> var x; while(x getter={});

Entering the above line in js shell crashes opt build with a bus error and asserts debug builds with "Assertion failure: op2 == JSOP_INITELEM, at jsinterp.c:5826".

Related to bug 380432?
(Reporter)

Comment 1

10 years ago
js> var x; while(x getter={});

The line now returns "typein:1: SyntaxError: invalid getter usage" and no longer quits with a bus error.

The assertion still occurs in the debug build though.
(Reporter)

Comment 2

10 years ago
I now get "SyntaxError: invalid getter usage:" in both js-opt and js-debug shells. Even the assertion no longer shows.

Resolving WFM.
Status: NEW → RESOLVED
Last Resolved: 10 years ago
Resolution: --- → WORKSFORME

Updated

10 years ago
Flags: in-testsuite?

Comment 3

10 years ago
/cvsroot/mozilla/js/tests/js1_5/extensions/regress-424257.js,v  <--  regress-424257.js
initial revision: 1.1
Flags: in-testsuite? → in-testsuite+
(Reporter)

Comment 4

5 years ago
A type of test for this bug has already been landed because it is already marked in-testsuite+ -> VERIFIED.
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.