Closed
Bug 843985
Opened 11 years ago
Closed 11 years ago
"Assertion failure: !script->isGenerator,"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
7.10 KB,
text/plain
|
Details |
for (x in (function() { eval("arguments[0]"); yield; })())(function() {}) asserts js debug shell on m-c changeset 885cde564ff3 without any CLI arguments at Assertion failure: !script->isGenerator,
Reporter | ||
Comment 1•11 years ago
|
||
autoBisect shows this is probably related to the following changeset: The first bad revision is: changeset: 122445:e3b899354a6f user: Brian Hackett date: Wed Feb 20 04:54:13 2013 -0700 summary: Bug 842522 - Don't force construction of arguments objects in the presence of dynamic name accesses, r=luke. Is bug 842522 a likely regressor?
Blocks: 842522
Flags: needinfo?(bhackett1024)
Comment 2•11 years ago
|
||
Rolling this in with bug 844048. This is a separate issue but the fix is small and both were caused by the same cset.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(bhackett1024)
Resolution: --- → DUPLICATE
Reporter | ||
Comment 3•11 years ago
|
||
Setting FIXED by bug 844048 instead. -> VERIFIED because in-testsuite+, the test here has also landed in that bug.
Status: RESOLVED → VERIFIED
Flags: in-testsuite+
Resolution: DUPLICATE → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•