651232 - TI: [infer failure] Missing type at #4:00003 pushed 0: RegExp:prototype:new

Status: RESOLVED DUPLICATE of bug 642772

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase crashes on TI revision d3215d1e985a (run with -n -a),
tested on 32 bit:

var gTestcases = new Array;
var gTc = gTestcases;
function TestCase(n, d, e, a) {
    gTestcases[gTc++] = this
}
TestCase.prototype.dump = function () + toPrinted();
function toPrinted(value) {
    value(/\\n/g, 'NL')
}
try {
    new TestCase;
    delete RegExp;
} catch (e) {}
try {
    for ([][1] in this) true
} catch (e) {}
gTestcases[0].dump()

Comment 2

[Christian Holler (:decoder)]

A testcase for this bug was already added in the original bug (bug 642772).