The following test case (run -n -a -m) causes the assertion on JM tip (tested on 64 bit): Array.prototype = 'bar'; var a = ; a[__lookupSetter__]='foo'; This could be related to 641535 but I'm not sure if it's the same.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 641535
You need to log in before you can comment on or make changes to this bug.