Closed
Bug 1071839
Opened 10 years ago
Closed 10 years ago
Assertion failure: live->empty(), at jit/LiveRangeAllocator.cpp
Categories
(Core :: JavaScript Engine: JIT, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1071879
Tracking | Status | |
---|---|---|
firefox35 | --- | affected |
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [jsbugmon:update])
Attachments
(1 file)
4.39 KB,
text/plain
|
Details |
setIonCheckGraphCoherency() function f(x) { x(Math.hypot(x && 0, 4294967296)) } try { f(Infinity) } catch (e) {} f() asserts js debug shell on m-c changeset 9e193395b912 with --no-threads --ion-eager at Assertion failure: live->empty(), at jit/LiveRangeAllocator.cpp. Debug configure flags: CC="clang -Qunused-arguments" CXX="clang++ -Qunused-arguments" AR=ar sh /Users/skywalker/trees/mozilla-central/js/src/configure --target=x86_64-apple-darwin12.5.0 --enable-debug --enable-optimize --enable-nspr-build --enable-more-deterministic --with-ccache --enable-gczeal --enable-debug-symbols --disable-tests === Tinderbox Build Bisection Results by autoBisect === The "good" changeset has the timestamp "20140923002344" and the hash "b3c0b2156cff". The "bad" changeset has the timestamp "20140923004245" and the hash "6465e8acae5e". Likely regression window: https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=b3c0b2156cff&tochange=6465e8acae5e Hannes, is bug 1064537 a possible regressor?
Flags: needinfo?(hv1989)
Reporter | ||
Comment 1•10 years ago
|
||
Updated•10 years ago
|
Status: NEW → RESOLVED
Closed: 10 years ago
Flags: needinfo?(hv1989)
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•