Closed Bug 600129 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: hasReg(reg),"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 596817
Tracking Flags:
Tracking Status
blocking2.0 --- betaN+

People

(Reporter: gkw, Unassigned)

References

Details

(Keywords: assertion, regression, testcase) 

(function () {
    for (let z in []) {
        z >> z
    }
})()

asserts js debug shell on TM changeset 54700fad8cf9 with -m at Assertion failure: hasReg(reg),
blocking2.0: --- → ?
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   53581:5a9241e86ecc
user:        Sean Stangl
date:        Mon Sep 13 16:47:57 2010 -0400
summary:     Fix isNotType() usage in jsop_rhs_unknown_any(). b=593554, r=dvander.
Blocks: 593554
Verified fixed by same patch as 596817.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
blocking2.0: ? → betaN+
A testcase for this bug was already added in the original bug (bug 596817).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.