Closed
Bug 780003
Opened 12 years ago
Closed 12 years ago
IonMonkey: "Assertion failure: index < stackPosition_,"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: gkw, Assigned: efaust)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [fuzzblocker])
Attachments
(2 files)
|
9.45 KB,
text/plain
|
Details | |
|
1.75 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
for(a in b){}
asserts js debug shell on IonMonkey changeset 9f3dc298e25b with --ion-eager at Assertion failure: index < stackPosition_,
|
Assignee | |
Comment 1•12 years ago
|
||
Comment on attachment 648576 [details] [diff] [review] Fix Review of attachment 648576 [details] [diff] [review]: ----------------------------------------------------------------- Thanks!
Attachment #648576 -
Flags: review?(dvander) → review+
|
|
Assignee | |
Comment 3•12 years ago
|
||
https://hg.mozilla.org/projects/ionmonkey/rev/0ba21d7a4c62
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
|
||
Comment 4•11 years ago
|
||
Automatically extracted testcase for this bug was committed: https://hg.mozilla.org/mozilla-central/rev/2e891e0db397
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•