Closed Bug 462292 Opened 17 years ago Closed 17 years ago

"Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL" with apply as LHS

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Assigned: gal)

References

Details

(Keywords: assertion, regression, testcase)

Attachments

(1 file, 1 obsolete file)

[].apply() = 1; Assertion failure: pn->pn_op == JSOP_CALL || pn->pn_op == JSOP_EVAL, at jsparse.cpp:1684 Tracemonkey branch, but does not require -j. Regression from bug 462209?
Attached patch patch (obsolete) — Splinter Review
Assignee: general → gal
Status: NEW → ASSIGNED
Attachment #345434 - Flags: review?
Attachment #345434 - Flags: review? → review?(jruderman)
Comment on attachment 345434 [details] [diff] [review] patch Forgot to add the new JSOP_APPLY case to the assert list. Jesse, if you don't feel confident review this hand it to mrbkap or brendan.
Andreas, search for other instances of the same assertion, I think we have it repeated several times.
Ok, will do.
Attachment #345434 - Flags: review?(jruderman)
Attached patch v2Splinter Review
Not sure what the 2nd cases does. Blake?
Attachment #345434 - Attachment is obsolete: true
Attachment #345436 - Flags: review?(mrbkap)
Attachment #345436 - Flags: review?(mrbkap) → review+
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
http://hg.mozilla.org/mozilla-central/rev/37b3fdbb0f07 /cvsroot/mozilla/js/tests/js1_5/Regress/regress-462292.js,v <-- regress-462292.js initial revision: 1.1
Flags: in-testsuite+
Flags: in-litmus-
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: