Closed
Bug 843985
Opened 13 years ago
Closed 13 years ago
"Assertion failure: !script->isGenerator,"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
|
7.10 KB,
text/plain
|
Details |
for (x in (function() {
eval("arguments[0]");
yield;
})())(function() {})
asserts js debug shell on m-c changeset 885cde564ff3 without any CLI arguments at Assertion failure: !script->isGenerator,
|
Reporter | |
Comment 1•13 years ago
|
||
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 122445:e3b899354a6f
user: Brian Hackett
date: Wed Feb 20 04:54:13 2013 -0700
summary: Bug 842522 - Don't force construction of arguments objects in the presence of dynamic name accesses, r=luke.
Is bug 842522 a likely regressor?
Blocks: 842522
Flags: needinfo?(bhackett1024)
|
||
Comment 2•13 years ago
|
||
Rolling this in with bug 844048. This is a separate issue but the fix is small and both were caused by the same cset.
Status: NEW → RESOLVED
Closed: 13 years ago
Flags: needinfo?(bhackett1024)
Resolution: --- → DUPLICATE
|
|
Reporter | |
Comment 3•13 years ago
|
||
Setting FIXED by bug 844048 instead. -> VERIFIED because in-testsuite+, the test here has also landed in that bug.
Status: RESOLVED → VERIFIED
Flags: in-testsuite+
Resolution: DUPLICATE → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•