569651 - JM: 32-bit Windows assert with Function, unary+, switch

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[David Mandelin [:dmandelin]]

Spun off from bug 549143 comment 41:

> +Function("switch(\"\"){case 1:case 8:}")
> 
> asserts 32-bit js debug shell on Windows 7.
> 
> With fatval repo e2b5d7222117:
> 
> $ ./js-dbg-32-fv-nt.exe
> js> +Function("switch(\"\"){case 1:case 8:}")
> Assertion failure: JSBOXEDWORD_IS_STRING(w), at
> c:\jsfunfuzz-dbg-32-fv-41918-e2b5d7222117\compilepath\jspubtd.h:702

Comment 1

[David Mandelin [:dmandelin]]

Assertion failure: JSBOXEDWORD_IS_STRING(w), at c:\sources\fatval\js\src\jspubtd.h:702

The boxedwords are going away, so I will recheck after that happens.

Comment 2

[David Mandelin [:dmandelin]]

As expected, this WFM given the boxedwords change, but I added the test case anyway, since test cases are good.

http://hg.mozilla.org/users/lwagner_mozilla.com/fatval/rev/a8a577c76a60