Closed Bug 452178 Opened 11 years ago Closed 11 years ago

TM: "Assertion failure: !(sprop->attrs & JSPROP_SHARED)" with getter

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, regression, testcase)

./js -j
js> q getter= function(){}; for (var j = 0; j < 4; ++j) q = 1;

Assertion failure: !(sprop->attrs & JSPROP_SHARED), at jsinterp.cpp:4445

(js shell built from tracemonkey branch)
Fixed on tm:

http://hg.mozilla.org/tracemonkey/index.cgi/rev/4714cee8d904

and on m-c:

http://hg.mozilla.org/mozilla-central/index.cgi/rev/a2ae40e570a7

/be
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
/cvsroot/mozilla/js/tests/js1_5/extensions/regress-452178.js,v  <--  regress-452178.js
initial revision: 1.1

http://hg.mozilla.org/mozilla-central/rev/40bc810be6f2
Flags: in-testsuite+
Flags: in-litmus-
You need to log in before you can comment on or make changes to this bug.