Last Comment Bug 735936 - "Assertion failure: !(flags & (0x40 | 0x80)),"
: "Assertion failure: !(flags & (0x40 | 0x80)),"
: assertion, regression, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: Trunk
: x86 Linux
-- critical (vote)
: ---
Assigned To: general
: Jason Orendorff [:jorendorff]
Depends on:
Blocks: jsfunfuzz
  Show dependency treegraph
Reported: 2012-03-14 17:14 PDT by Gary Kwong [:gkw] [:nth10sd]
Modified: 2013-01-19 14:27 PST (History)
6 users (show)
choller: in‑testsuite+
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---

stack (4.46 KB, text/plain)
2012-03-14 17:14 PDT, Gary Kwong [:gkw] [:nth10sd]
no flags Details

Description User image Gary Kwong [:gkw] [:nth10sd] 2012-03-14 17:14:36 PDT
Created attachment 606030 [details]

f = (function() {
    "use strict";
    [arguments] = eval()

asserts js debug shell on m-c changeset 7e713db43d8d without any CLI arguments at Assertion failure: !(flags & (0x40 | 0x80)),

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   87904:bd71047c9b4d
user:        Luke Wagner
date:        Tue Feb 07 12:34:29 2012 -0800
summary:     Bug 724790 - get rid of the hasOverriddenArgs funny business (r=waldo)
Comment 1 User image Luke Wagner [:luke] 2012-03-14 17:33:12 PDT
The bug here predates bug 724790, bug 724790 just added an assert (at Waldo's suggestion) that caught it.  Waldo: seems like destructuring needs to check for a strict-mode error?
Comment 2 User image Luke Wagner [:luke] 2012-03-14 17:34:24 PDT
Also, why in the world is the destructoring code emitting qnamepart/enumelem...
Comment 3 User image Gary Kwong [:gkw] [:nth10sd] 2012-05-21 16:16:12 PDT
Seems fixed by bug 740446.

autoBisect shows this is probably related to the following changeset:

The first good revision is:
changeset:   91358:fa24b215d49e
user:        Luke Wagner
date:        Mon Apr 02 08:58:30 2012 -0700
summary:     Bug 740446 - make 'arguments' more like a normal local binding (r=bhackett)
Comment 4 User image Jeff Walden [:Waldo] (remove +bmo to email) 2012-05-21 16:40:03 PDT
Yeah, the destructuring code appears to need strict mode error handling.  :-\  Filed bug 757273 on that.
Comment 5 User image Christian Holler (:decoder) 2013-01-19 14:27:50 PST
Automatically extracted testcase for this bug was committed:

Note You need to log in before you can comment on or make changes to this bug.