Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2024-10-10 11:55:49 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 515885 - Assertion failure: !scope->owned(), at ../jsobj.cpp. r=brendan.

Browse Source
This commit is contained in:
Jason Orendorff 2009-10-23 14:35:53 -05:00
parent 12f2581e38
commit c4cfe74c33
3 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
js/src/jsparse.cpp
View File

@ -6625,8 +6625,7 @@ ComprehensionTail(JSParseNode *kid, uintN blockid, JSTreeContext *tc,
pn2->pn_kid = kid;
*pnp = pn2;
if (type == TOK_ARRAYPUSH)
PopStatement(tc);
PopStatement(tc);
return pn;
}

1
js/src/tests/js1_8_1/regress/jstests.list
View File

@ -79,3 +79,4 @@ script regress-496922.js
script regress-507053.js
script regress-507295.js
script regress-507424.js
script regress-515885.js

6
js/src/tests/js1_8_1/regress/regress-515885.js Normal file
View File

@ -0,0 +1,6 @@
// Any copyright is dedicated to the Public Domain.
// http://creativecommons.org/licenses/publicdomain/
var it = (x for (x in [function(){}]));
it.next();
reportCompare("no assertion failure", "no assertion failure", "See bug 515885.");