Last Comment Bug 743407 - ALIASEDVAR Patch: Assertion failure: fp->script()->varIsAliased(index) == aliased, at jsinterp.cpp:1103
: ALIASEDVAR Patch: Assertion failure: fp->script()->varIsAliased(index) == ali...
Status: RESOLVED FIXED
: assertion, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: unspecified
: x86_64 Linux
: -- critical (vote)
: ---
Assigned To: Luke Wagner [:luke]
:
:
Mentors:
Depends on:
Blocks: langfuzz 740259
  Show dependency treegraph
 
Reported: 2012-04-06 18:09 PDT by Christian Holler (:decoder)
Modified: 2012-04-09 14:48 PDT (History)
2 users (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments

Description Christian Holler (:decoder) 2012-04-06 18:09:49 PDT
The following test asserts on mozilla-central revision d0430a04d92a with patch from bug 740259 (options -m -n):


function foo(b) {
    if (b)
      function arguments() {};
    const arguments = this, Uint32Array;
}
var a = foo(true);
Comment 1 Luke Wagner [:luke] 2012-04-09 14:48:58 PDT
Arg, function statements don't noteBindingsAccessedDynamically in general, which was assumed by the 'arguments' prolog code.  Fix and test-case rolled into bug 740446; I almost already had it; just missing the critical 'var'.  Thanks again!

Note You need to log in before you can comment on or make changes to this bug.