Closed Bug 633525 Opened 13 years ago Closed 13 years ago

Assertion failure: cx->enumerators == obj, at ../jsiter.cpp:792

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
All
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Tracking Flags:
Tracking Status
blocking2.0 --- final+

People

(Reporter: jandem, Unassigned)

References

Details

(Keywords: assertion, regression, testcase, Whiteboard: [hardblocker]) 

More iterator fun..
--
var o1 = {p1: 1};
var o2 = {p1: 1, p2: 2};

for(var x in o1) {
    for(var y in o2) {
        delete o2.p2;
    }
}
--
This asserts without -m:

Assertion failure: cx->enumerators == obj, at ../jsiter.cpp:792
blocking2.0: --- → ?
This is a regression from bug 633409.
Blocks: 633409
Keywords: regression
Alright, this needs a JS owner. I am super busy with other blockers.
blocking2.0: ? → final+
Whiteboard: [hardblocker]
Fixed by backing out the regressor.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.