TM: "Assertion failure: tracecx->bailExit," with e4x, delete

RESOLVED FIXED in mozilla1.9.3a5

Status

()

P1
critical
RESOLVED FIXED
9 years ago
6 years ago

People

(Reporter: gkw, Assigned: brendan)

Tracking

(Blocks: 1 bug, {assertion, regression, testcase})

Trunk
mozilla1.9.3a5
assertion, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(blocking2.0 betaN+)

Details

(Whiteboard: fixed-in-tracemonkey)

Attachments

(1 attachment)

(Reporter)

Description

9 years ago
x = <x/>
for each(l in [0, 0, 0, 0]) {
    delete x.d
}

asserts js debug shell on TM tip with -j at Assertion failure: tracecx->bailExit, at ../jstracer.cpp:7690
(Assignee)

Updated

9 years ago
Assignee: general → brendan
Blocks: 523452
Status: NEW → ASSIGNED
OS: Linux → All
Priority: -- → P1
Hardware: x86 → All
Target Milestone: --- → mozilla1.9.3a5
(Reporter)

Comment 1

9 years ago
Confirming related to bug 523452 through a manual bisect.
blocking2.0: --- → ?
(Assignee)

Updated

9 years ago
Blocks: 569849
(Assignee)

Comment 2

9 years ago
Created attachment 449045 [details] [diff] [review]
fixes & tests
Attachment #449045 - Flags: review?(jorendorff)
Comment on attachment 449045 [details] [diff] [review]
fixes & tests

Great.
Attachment #449045 - Flags: review?(jorendorff) → review+

Updated

9 years ago
Attachment #449045 - Flags: review+

Comment 4

9 years ago
Comment on attachment 449045 [details] [diff] [review]
fixes & tests

This is consistent with what the iterator code does.
(Assignee)

Comment 5

9 years ago
http://hg.mozilla.org/tracemonkey/rev/02485857682c

/be
Whiteboard: fixed-in-tracemonkey

Comment 6

9 years ago
http://hg.mozilla.org/mozilla-central/rev/02485857682c
Status: ASSIGNED → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → FIXED

Updated

8 years ago
blocking2.0: ? → betaN+
A testcase for this bug was automatically identified at js/src/jit-test/tests/e4x/bug569843.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.