627685 - TM: Different output with testcase involving replace

Status: RESOLVED DUPLICATE of bug 621464

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

x = <x>></x>
try {
    (function() {
        x.replace()
    })()
    print(x)
} catch(e) {}


Opt without -m or -j:

undefined

Opt with -m:

>undefined

Opt with -j:

undefined

===

Dbg without -m or -j:

>undefined

Dbg with -j:

>undefined

Dbg with -m:

>undefined

Tested on TM changeset aa618e93942e

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Opt with both -m -j:

outputs:

>undefined

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   59771:1d1fe1d1e626
user:        Luke Wagner
date:        Mon Dec 06 10:26:58 2010 -0800
summary:     Bug 609440, part 4 - make JSString::chars() fallible (r=waldo,dvander,igor,dwitte,njn)

Comment 3

[Luke Wagner [:luke]]

D'oh, I forgot I needed to land bug 621464.  Sorry for the hassle Gary!