Closed Bug 600878 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: fe_,"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 600419
Tracking Flags:
Tracking Status
blocking2.0 --- betaN+

People

(Reporter: gkw, Unassigned)

References

Details

(Keywords: assertion, regression, testcase)

Function("let e=b=x*=e<<e")() asserts js debug shell on TM changeset 98c134cf59ef with -m at Assertion failure: fe_,
blocking2.0: --- → ?
Dup of bug 600419?
(In reply to comment #1) > Dup of bug 600419? Yes. Fixed by patch posted in that bug.
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → DUPLICATE
Yup, autoBisect pretty much confirms this. autoBisect shows this is probably related to the following changeset: The first bad revision is: changeset: 54495:1bbc0fc10747 user: David Anderson date: Tue Sep 21 18:34:42 2010 -0700 summary: Optimize FrameState for large linear scripts (bug 591836, r=dmandelin).
Blocks: 591836
blocking2.0: ? → betaN+
A testcase for this bug was already added in the original bug (bug 600419).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.