Created attachment 540226 [details]
crashes js opt shell on JM changeset 9ff00d53b5a5 without any CLI arguments at GetElement and asserts js debug shell at Assertion failure: index >= 0,
May be related to bug 663468 or bug 664009 ?
Also reproduces on TM changeset e59b1d2a2f79.
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
user: Jeff Walden
date: Mon Jan 12 13:07:48 2009 -0800
summary: Bug 465980 - Some array methods don't work right on ginormous arrays. r=brendan
I didn't land the fix for bug 664009 in TM, only in m-c and a bunch of beta and release branches. I'm pretty sure this goes away with a m-c->TM merge.
*** This bug has been marked as a duplicate of bug 663468 ***
*** Bug 663468 has been marked as a duplicate of this bug. ***
sorry for the noise.
(In reply to comment #3)
> I didn't land the fix for bug 664009 in TM, only in m-c and a bunch of beta
> and release branches. I'm pretty sure this goes away with a m-c->TM merge.
Confirmed to be fixed in a later TM changeset 0428dbdf3d58.