Function("let e=b=x*=e<<e")() asserts js debug shell on TM changeset 98c134cf59ef with -m at Assertion failure: fe_,
Dup of bug 600419?
(In reply to comment #1) > Dup of bug 600419? Yes. Fixed by patch posted in that bug.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 600419
Yup, autoBisect pretty much confirms this. autoBisect shows this is probably related to the following changeset: The first bad revision is: changeset: 54495:1bbc0fc10747 user: David Anderson date: Tue Sep 21 18:34:42 2010 -0700 summary: Optimize FrameState for large linear scripts (bug 591836, r=dmandelin).
A testcase for this bug was already added in the original bug (bug 600419).
You need to log in before you can comment on or make changes to this bug.