Assertion failure: cx->enumerators == obj, at ../jsiter.cpp:792

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
7 years ago
7 years ago

People

(Reporter: jandem, Unassigned)

Tracking

({assertion, regression, testcase})

unspecified
All
Mac OS X
assertion, regression, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(blocking2.0 final+)

Details

(Whiteboard: [hardblocker])

(Reporter)

Description

7 years ago
More iterator fun..
--
var o1 = {p1: 1};
var o2 = {p1: 1, p2: 2};

for(var x in o1) {
    for(var y in o2) {
        delete o2.p2;
    }
}
--
This asserts without -m:

Assertion failure: cx->enumerators == obj, at ../jsiter.cpp:792
(Reporter)

Updated

7 years ago
blocking2.0: --- → ?
(Reporter)

Comment 1

7 years ago
This is a regression from bug 633409.
Blocks: 633409
Keywords: regression

Comment 2

7 years ago
Alright, this needs a JS owner. I am super busy with other blockers.

Updated

7 years ago
blocking2.0: ? → final+
Whiteboard: [hardblocker]

Comment 3

7 years ago
Fixed by backing out the regressor.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.