785989 - Assertion failure: !isForOf || !isForEach, at jsreflect.cpp:2140

Status: RESOLVED DUPLICATE of bug 728079

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on mozilla-central revision f077de66e52d (run with -m -n):


version(170);
function test(str, arg, result) {
    var fun = new Function('x', str);
    var got = fun.toSource();
    Reflect.parse(got);
}
test("for (let [a, b] of c) { a.m(b); }");

Comment 1

[Christian Holler (:decoder)]

JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   99950:e080642175e6
user:        Benjamin Peterson
date:        Fri Jul 20 20:17:38 2012 +0200
summary:     Bug 761723 - Save script sources to implement Function.prototype.toString. r=jorendorff,njn,jimb,jst,Ms2ger

Comment 2

[Christian Holler (:decoder)]

Benjamin, comment 1 seems to point to bug 761723 as the source of this issue, can you take a look? I guess it's low priority though :)

Comment 3

[Jason Orendorff [:jorendorff]]

A little simpler:

version(170);
Reflect.parse("for (let [a, b] of c) ;");

Comment 4

[Christian Holler (:decoder)]

JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   99718:3b72e384d1bf
user:        Benjamin Peterson
date:        Wed Jul 18 18:14:15 2012 -0400
summary:     Bug 725702: support for of loops in Reflect.parse r=dherman

Comment 6

[Christian Holler (:decoder)]

A testcase for this bug was already added in the original bug (bug 728079).