Created attachment 8339685 [details] testcase with fragile timing Assertion failure: ctorValue.isObject() && ctorValue.toObject().is<JSFunction>(), at js/src/builtin/ParallelArray.cpp:121
Niko, could you look into this? Thanks.
I am confused. This is running on the trunk? I don't see how that could be, since builtin/ParallelArray.h was long ago removed.
I reported this in November. ParallelArray was removed in December (bug 944074).