Assertion failure: !pn->pn_u.name.cookie.isFree(), at frontend/BytecodeEmitter.cpp:918

RESOLVED FIXED in mozilla16

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: decoder, Assigned: Benjamin)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Trunk
mozilla16
x86
Linux
assertion, testcase
Points:
---
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [js:t][jsbugmon:update])

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
The following test asserts on mozilla-central revision 85e31a4bdd41 (options -m -n -a):


function test( d = 1, a = this, ... f)  {
    function f() {}
}


Found by adding combined support for Harmony's parameter default values and rest parameter to the LangFuzz ES3 grammar.
(Assignee)

Comment 1

5 years ago
Created attachment 633397 [details] [diff] [review]
fix
Assignee: general → bpeterson
Attachment #633397 - Flags: review?(jorendorff)
Whiteboard: js-triage-needed [jsbugmon:update] → [js:t][jsbugmon:update]
Attachment #633397 - Flags: review?(jorendorff) → review+
(Assignee)

Updated

5 years ago
Keywords: checkin-needed
http://hg.mozilla.org/integration/mozilla-inbound/rev/14305028261b
Keywords: checkin-needed
Target Milestone: --- → mozilla16

Comment 3

5 years ago
https://hg.mozilla.org/mozilla-central/rev/14305028261b
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
(Reporter)

Comment 4

4 years ago
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.