586547 - TM: Different values with testcase containing for...each, for...in, Boolean()

Status: RESOLVED DUPLICATE of bug 587964

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

try {
    for each(ex in [Boolean()])
    function gs() {}
    x = []
    var b = [];
    for ([, b] in this) {
        print(b)
    }
    var e
} catch (e) {}

Tested on JM changeset f7cf2b7b7961, this doesn't seem to occur on TM.

Without any parameters, this returns (the same result as the TM branch shells):

undefined
undefined
x
s
undefined

With -j on JM, this returns a different result:

undefined
undefined
x
s

(Note the last missing "undefined")

Comment 1

[Jesse Ruderman]

I think this is a dup of bug 585260.

Comment 2

[David Anderson [:dvander] - inactive, e-mail if emergency]

This reproduces on tm-tip with HOTLOOP = 3. Bisecting.

Comment 3

[David Anderson [:dvander] - inactive, e-mail if emergency]

changeset:   48671:fd0411f5ce7f
user:        Andreas Gal <[e-mail]>
date:        Thu Aug 05 22:54:34 2010 -0700
summary:     Optimize string[idx] on trace (584499, r=lw).

Comment 4

[Jan de Mooij [:jandem]]

Maybe a dup of bug 587964

Comment 5

[David Anderson [:dvander] - inactive, e-mail if emergency]

Good call.