885067 - Assertion failure: data.s.payload.why == why, at dist/include/js/Value.h

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

(function() {
    "".replace("", b => {
        return eval("[arguments]")
    })
})()

asserts js debug shell on m-c changeset c12150cfdfef without any CLI arguments at Assertion failure: data.s.payload.why == why, at dist/include/js/Value.h

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   http://hg.mozilla.org/mozilla-central/rev/bf3ce88c6ea3
user:        Jason Orendorff
date:        Sun Mar 17 20:42:36 2013 -0700
summary:     Bug 846406 - Implement arrow functions. r=bhackett. Changes to Y.js r=brendan.

Comment 2

[Jason Orendorff [:jorendorff]]

The patch in bug 852762 fixes this.

Comment 3

[Jason Orendorff [:jorendorff]]

It was due to arguments not existing in arrow functions, which bug 852762 backs out.

Comment 4

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/e32ba820b8ce
https://hg.mozilla.org/mozilla-central/rev/d38da575ace4