Closed Bug 600878 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: fe_,"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 600419
Tracking Flags:
Tracking Status
blocking2.0 --- betaN+

People

(Reporter: gkw, Unassigned)

References

Details

(Keywords: assertion, regression, testcase) 

Function("let e=b=x*=e<<e")()

asserts js debug shell on TM changeset 98c134cf59ef with -m at Assertion failure: fe_,
blocking2.0: --- → ?
Dup of bug 600419?
(In reply to comment #1)
> Dup of bug 600419?

Yes. Fixed by patch posted in that bug.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Yup, autoBisect pretty much confirms this.

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   54495:1bbc0fc10747
user:        David Anderson
date:        Tue Sep 21 18:34:42 2010 -0700
summary:     Optimize FrameState for large linear scripts (bug 591836, r=dmandelin).
Blocks: 591836
blocking2.0: ? → betaN+
A testcase for this bug was already added in the original bug (bug 600419).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.