Closed Bug 765055 Opened 11 years ago Closed 11 years ago

Assertion failure: !pn->pn_u.name.cookie.isFree(), at frontend/BytecodeEmitter.cpp:918

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla16

People

(Reporter: decoder, Assigned: Benjamin)

Details

(Keywords: assertion, testcase, Whiteboard: [js:t][jsbugmon:update])

Attachments

(1 file)

fix
1.67 KB, patch
jorendorff
: review+
Details | Diff | Splinter Review 
The following test asserts on mozilla-central revision 85e31a4bdd41 (options -m -n -a):


function test( d = 1, a = this, ... f)  {
    function f() {}
}


Found by adding combined support for Harmony's parameter default values and rest parameter to the LangFuzz ES3 grammar.
Attached patch fix — — Splinter Review 
Assignee: general → bpeterson

        Attachment #633397 -
        Flags: review?(jorendorff)
Whiteboard: js-triage-needed [jsbugmon:update] → [js:t][jsbugmon:update]

        Attachment #633397 -
        Flags: review?(jorendorff) → review+

    
  
Keywords: checkin-needed

    
    

    
  
https://hg.mozilla.org/mozilla-central/rev/14305028261b
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED

    
    

    
  
Automatically extracted testcase for this bug was committed:

https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+

          You need to log in
          before you can comment on or make changes to this bug.