From 8101f0e3d28e3df29a779baf45d5933b3ec4f09d Mon Sep 17 00:00:00 2001
From: Brendan Eich <brendan@mozilla.org>
Date: Wed, 20 Jan 2010 16:28:18 -0800
Subject: [PATCH] Bug 540774: "Assertion failure: top <
 StackDepth(ss->printer->script)" decompiling upvar (r=jorendorff).

---
 js/src/jsopcode.cpp | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/js/src/jsopcode.cpp b/js/src/jsopcode.cpp
index f16e0ee74e13..6d25cdf47b87 100644
--- a/js/src/jsopcode.cpp
+++ b/js/src/jsopcode.cpp
@@ -2525,8 +2525,13 @@ Decompile(SprintStack *ss, jsbytecode *pc, intN nb, JSOp nextop)
                     break;
 
                   case SRC_HIDDEN:
-                    /* Hide this pop, it's from a goto in a with or for/in. */
+                    /*
+                     * Hide this pop. Don't adjust our stack depth model if
+                     * it's from a goto in a with or for/in.
+                     */
                     todo = -2;
+                    if (lastop == JSOP_UNBRAND)
+                        (void) POP_STR();
                     break;
 
                   case SRC_DECL: