ALIASEDVAR Patch: Assertion failure: script->needsArgsObj(), at methodjit/Compiler.cpp:4065

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: decoder, Assigned: luke)

Tracking

(Blocks: 1 bug, {assertion, testcase})

unspecified
x86_64
Linux
assertion, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

5 years ago
The following test asserts on mozilla-central revision d0430a04d92a with patch from bug 740259 (options -m -n -a):


test();
function test() {
  (arguments);
  GenA.prototype = new Gen0();
}
(Reporter)

Updated

5 years ago
Assignee: general → luke
(Assignee)

Comment 1

5 years ago
Ah, the assert I added was overzealous.  Will roll the test-case in with bug 740259.  Thanks!
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
(Reporter)

Comment 2

5 years ago
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/testBug743408.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.