Closed
Bug 601402
Opened 15 years ago
Closed 15 years ago
"Assertion failure: !SHAPE_FETCH(spp),"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 601395
| Tracking | Status | |
|---|---|---|
| blocking2.0 | --- | betaN+ |
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase)
for (let d in [(0)]) let(b = (let(e) {}), d
asserts js debug shell on TM changeset 0230a9e80c1f without -m or -j at Assertion failure: !SHAPE_FETCH(spp),
|
Reporter | |
Updated•15 years ago
|
blocking2.0: --- → ?
|
|
Reporter | |
Comment 1•15 years ago
|
||
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 54650:427282865362
user: Bill McCloskey
date: Wed Sep 29 13:21:36 2010 -0700
summary: Bug 535912 - Eliminate blockChain from JSStackFrame (r=cdleary)
Blocks: 535912
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
|
||
Updated•15 years ago
|
blocking2.0: ? → betaN+
|
||
Comment 3•13 years ago
|
||
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug601402.js.
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•