Closed Bug 657197 Opened 9 years ago Closed 9 years ago

TI: "Assertion failure: bad,"

Categories

(Core :: JavaScript Engine, defect, critical)

x86
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: gkw, Unassigned)

References

(Blocks 2 open bugs)

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Attached file stack
(function() {
  new function() {
    throw [];
  }
})()

asserts js debug shell on JM changeset ef1ce31f66b9 with -n at Assertion failure: bad
When analyzing the properties created when 'new' is called on a script, we assumed that there was a reachable return statement in the script.  This may not hold if the script always throws.

http://hg.mozilla.org/projects/jaegermonkey/rev/88112acd3094
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug657197.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.