The following test asserts on mozilla-inbound revision 8160165dfcb4:
Changeset 71368:d2250fc608cc: bad
The first bad revision is:
user: Jeff Walden
date: Fri Apr 01 15:24:21 2011 -0700
summary: Bug 646129 - [[DefaultValue]] on Date objects is wrong when called with no hint. r=luke
Although this issue was found using a mutation of the "prop_iter_trace" test for coverage increase in 669864, I don't see a direct connection there. If I'm wrong there and this function is related, let me know.
Created attachment 548535 [details] [diff] [review]
This is fallout from a minor adjustment to how the convert hook works -- added an assertion that makes the problem clearer. I also went and updated JSClass.convert and JS_ConvertStub docs on MDN for this adjustment, while it was on the brain.
<3 being able to push and not have to watch the tree. :-) (This was tryservered, in my defense, if this blows up in my face for some reason.)
Automatically extracted testcase for this bug was committed: