"Assertion failure: pn->pn_type != TOK_COMMA, at ../jsemit.cpp"

RESOLVED FIXED

Status

()

defect
P1
critical
RESOLVED FIXED
10 years ago
10 years ago

People

(Reporter: gkw, Assigned: jorendorff)

Tracking

(Blocks 1 bug, {assertion, regression, testcase})

Trunk
x86
macOS
Points:
---
Dependency tree / graph
Bug Flags:
blocking1.9.2 +

Firefox Tracking Flags

(status1.9.2 beta1-fixed)

Details

(Whiteboard: fixed-in-tracemonkey)

Attachments

(1 attachment)

Reporter

Description

10 years ago
[]=[(0,0)]

asserts js dbg shell on TM branch (31079:3d4074b8928e) without -j at Assertion failure: pn->pn_type != TOK_COMMA, at ../jsemit.cpp:3855 when parsed in as a file.

$ cat a.js
[]=[(0,0)]
$ ./js-dbg-tm-darwin a.js 
Assertion failure: pn->pn_type != TOK_COMMA, at ../jsemit.cpp:3855
Trace/BPT trap

autoBisecting soon...
Flags: blocking1.9.2?
Assignee

Comment 2

10 years ago
Posted patch v1Splinter Review
The assertion is wrong.  The bug is harmless in non-DEBUG builds.
Assignee: general → jorendorff
Attachment #393706 - Flags: review?(jwalden+bmo)
Assignee

Updated

10 years ago
Blocks: 461269
Reporter

Comment 3

10 years ago
(In reply to comment #1)
> My money's on tracemonkey changeset ffbcd7c55130.

Yup.

Updated

10 years ago
Attachment #393706 - Flags: review?(jwalden+bmo) → review+
Assignee

Comment 4

10 years ago
http://hg.mozilla.org/tracemonkey/rev/a30674b90265
Whiteboard: fixed-in-tracemonkey

Comment 5

10 years ago
http://hg.mozilla.org/mozilla-central/rev/a30674b90265
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED

Updated

10 years ago
Flags: blocking1.9.2? → blocking1.9.2+

Updated

10 years ago
Priority: -- → P1
You need to log in before you can comment on or make changes to this bug.