798831 - Assertion failure: !bce->script->noScriptRval

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Bob Clary [:bc] (inactive)]

1. http://demos.bonsaijs.org/demos/pie/index.html
2. Assertion failure: !bce->script->noScriptRval

EmitStatement js::frontend::EmitTree(JSContext*, js::frontend::BytecodeEmitter*, js::frontend::ParseNode*) EmitStatementList js::frontend::EmitTree(JSContext*, js::frontend::BytecodeEmitter*, js::frontend::ParseNode*) js::frontend::EmitTree(JSContext*, js::frontend::BytecodeEmitter*, js::frontend::ParseNode*)

Nightly/18, Aurora/17 all platforms. Didn't crash Nightly opt build on OSX but didn't test other opt builds.

I'll work on the regression range and see if I can reduce.

Comment 1

[Bob Clary [:bc] (inactive)]

Found regression between 20120725002955-20120725150956
Pushlog: http://hg.mozilla.org/mozilla-central/pushloghtml?fromchange=ef20925bc2a5&tochange=7065b767f30d
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012/07/2012-07-25-mozilla-central-debug/firefox-17.0a1.en-US.debug-linux-i686.tar.bz2
http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2012/07/2012-07-26-mozilla-central-debug/firefox-17.0a1.en-US.debug-linux-i686.tar.bz2

Comment 2

[Bob Clary [:bc] (inactive)]

Attachment: testcase

semi-reduced test case.

Comment 3

[Bob Clary [:bc] (inactive)]

Another example: http://www.khanacademy.org/cs/intro-to-coloring/844038377

Comment 4

[Bob Clary [:bc] (inactive)]

Retested url, + testcase + khan with OSX 10.{6,8,9}, RHEL6 {32,64}bit, Windows 7 {32,64}bit, Beta/38, Aurora/39, Nightly/40 and no crash. -> WFM.