Closed Bug 459185 Opened 13 years ago Closed 13 years ago

Assertion failure: pn->pn_arity == PN_BINARY

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
critical

Tracking

()

VERIFIED FIXED

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, regression, testcase)

./js
js> for (var {a: []} = 2 in []) { }
Assertion failure: pn->pn_arity == PN_BINARY, at jsemit.cpp:2500

Tracemonkey branch.  Regression from bug 381843?
Fixed by patch for bug 459186.

/be
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Depends on: 459186
No longer blocks: 381843
Blocks: 381843
/cvsroot/mozilla/js/tests/js1_8/regress/regress-459185.js,v  <--  regress-459185.js
initial revision: 1.1

http://hg.mozilla.org/mozilla-central/rev/b04c04268a94
Flags: in-testsuite+
Flags: in-litmus-
v 1.9.1
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.