Bug 502914 - JIT code can call js_AddProperty when the property already exists (Asser...
commit1d65cbdce0a243600a1487623a12978e59560ff3
authorJason Orendorff <jorendorff@mozilla.com>
Wed, 8 Jul 2009 20:44:58 +0000 (8 15:44 -0500)
committerJason Orendorff <jorendorff@mozilla.com>
Wed, 8 Jul 2009 20:44:58 +0000 (8 15:44 -0500)
treeadf93c359bc3cee0032cdd7e4e47425d1a7ef1a6
parent6b66a9438d3edccb9ae5581e90bba4d671fd5ef8
Bug 502914 - JIT code can call js_AddProperty when the property already exists (Assertion failure: !SCOPE_HAS_PROPERTY(scope, sprop), at ../jsbuiltins.cpp:257). r=gal.
js/src/jsbuiltins.cpp
js/src/trace-test.js