Assertion failure: pcdepth >= nuses, at js/src/jsopcode.cpp:1682

RESOLVED FIXED in mozilla28

Status

()

defect
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: anba, Assigned: wingo)

Tracking

Trunk
mozilla28
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

test case:
---
function iterable() {
  var iterable = {};
  var iteratorSym = [...Proxy({}, {get: (_, pk) => [][pk].bind([pk])})][0];
  iterable[iteratorSym] = () => ({next: () => void 0});
  return iterable;
}

(function*(){yield*iterable()}()).next();
---


Assertion failure: pcdepth >= nuses, at /home/svdi/git/mozilla-central/js/src/jsopcode.cpp:1682
I'll take this one.
Assignee: nobody → wingo
Status: NEW → ASSIGNED
It's not the most direct path to a solution, but bug 932180 fixes this issue by rewriting the decompiler's bytecode parser.
Posted patch Add test caseSplinter Review
Depends on: 932180
Comment on attachment 830122 [details] [diff] [review]
Add test case

Fixed by bug 932180, already landed; this patch just adds a test case.
Attachment #830122 - Flags: review?(jdemooij)
Attachment #830122 - Flags: review?(jdemooij) → review+
Keywords: checkin-needed
https://hg.mozilla.org/mozilla-central/rev/4f3d8d775d3c
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla28
You need to log in before you can comment on or make changes to this bug.