Closed
Bug 516263
Opened 15 years ago
Closed 15 years ago
"Assertion failure: kind == JSLOCAL_VAR, at ../jsfun.cpp" with eval, for...in
Categories
(Core :: JavaScript Engine, defect, P1)
Tracking
()
RESOLVED
FIXED
People
(Reporter: gkw, Assigned: brendan)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: fixed-in-tracemonkey)
Attachments
(1 file)
|
1005 bytes,
patch
|
Details | Diff | Splinter Review |
(function () {
for (w in (eval("eval(\"#1#\",#1=[#1#])")))
function(){}
})()
assert js debug shell on TM tip without -j at Assertion failure: kind == JSLOCAL_VAR, at ../jsfun.cpp:1807
autoBisect shows this is probably related to bug 515815:
The first bad revision is:
changeset: 32229:23c4d4f10fcd
user: Brendan Eich
date: Fri Sep 11 10:47:47 2009 -0700
summary: Bug 515815 - TM: Regression on shell test case regress-452498-224.js (r=igor).Flags: blocking1.9.2?
|
Assignee | |
Comment 1•15 years ago
|
||
|
||
Updated•15 years ago
|
Flags: blocking1.9.2? → blocking1.9.2+
|
||
Comment 2•15 years ago
|
||
Comment on attachment 400408 [details] [diff] [review] fix As with the bug 516262, the patch should use a symbolic constant. r+ with that fixed.
Attachment #400408 -
Flags: review?(igor)
|
|
Assignee | |
Comment 3•15 years ago
|
||
http://hg.mozilla.org/tracemonkey/rev/3eacc26d9dd0 /be
Whiteboard: fixed-in-tracemonkey
|
||
Updated•15 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
|
|
||
Comment 4•15 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/3eacc26d9dd0
|
|
||
Updated•15 years ago
|
Priority: -- → P1
|
|
||
Updated•15 years ago
|
Flags: blocking1.9.2+ → blocking1.9.2?
|
||
Comment 5•15 years ago
|
||
Need a blocking decision here for mozilla-1.9.2.
|
|
||
Comment 6•15 years ago
|
||
blocking-, a regression from a patch that didn't land on 1.9.2
Flags: blocking1.9.2? → blocking1.9.2-
You need to log in
before you can comment on or make changes to this bug.
Description
•