965150 - jsreflect.cpp throws "InternalError: bad parse node" for valid js code

Status: RESOLVED DUPLICATE of bug 963641

(Core :: JavaScript Engine, defect)

Description

[Victor Porof [:vporof][:vp]]

The following code:

var foo = {};
var bar = {};

foo.prototype = {
  __proto__: bar
};

makes jsreflect.cpp throw a JSMSG_BAD_PARSE_NODE.

Comment 1

[Victor Porof [:vporof][:vp]]

It seems that ASTSerializer::property wants to match the "__proto__: bar" parse node as a JSOP_INITPROP, JSOP_INITPROP_GETTER or JSOP_INITPROP_SETTER, but the node is actually null, so it fails the assertion with a LOCAL_NOT_REACHED.

Comment 2

[Victor Porof [:vporof][:vp]]

CC-ing some people who might know something about this. My experience with the reflection API is very limited.

Comment 3

[Jan de Mooij [:jandem]]

This is probably a duplicate of bug 963641.

Comment 4

[Jason Orendorff [:jorendorff]]

Yes it is.