766064 - Assertion failure: bce->sc->funIsHeavyweight(), at frontend/BytecodeEmitter.cpp:886

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following test asserts on mozilla-central revision 19bfe36cace8 (options -m -n -a):


function loop( p = 1, actual = this)  {
  for (var i = 0; 
        (function() { 
        actual += this.assertEq + ' toString, '; 
        }); 
  ++i) { }
}

Comment 1

[Luke Wagner [:luke]]

Attachment: rm assert and add test

Oops, the assert is overly conservative: the heavyweight flag can be set later in rare cases, but the only important thing is that it gets set.

On a side note, the way the heavyweight flag gets set (and closed vars get noted) is pretty awkward.

Comment 2

[Luke Wagner [:luke]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/e6c5677e58de

Comment 3

[Ryan VanderMeulen [:RyanVM]]

https://hg.mozilla.org/mozilla-central/rev/e6c5677e58de

Comment 4

[Christian Holler (:decoder)]

A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/testBug766064.js.