Closed Bug 1183125 Opened 9 years ago Closed 9 years ago

Assertion failure: MIR instruction returned object with unexpected type, at c:/Users/mozilla/debug-b uilds/mozilla-central/js/src/jit/MacroAssembler.cpp:1789 with signature EnterIon js::jit::IonCannon Interpret js::RunScript js::Invoke

Categories

(Core :: JavaScript Engine: JIT, defect)

defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1183153

People

(Reporter: cbook, Unassigned)

References

()

Details

(Keywords: assertion, sec-high)

Attachments

(1 file)

Attached file bughunter stack
Assertion failure: MIR instruction returned object with unexpected type, at c:/Users/mozilla/debug-b
uilds/mozilla-central/js/src/jit/MacroAssembler.cpp:1789

steps to reproduce:
--> Load https://www.draftkings.com/contest/gamecenter/7203809?uc=95759342
---> Assertion failure: MIR instruction returned object with unexpected type and the signature EnterIon js::jit::IonCannon Interpret js::RunScript js::Invoke
Looks like a dupe of bug 1183153.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
Group: core-security → core-security-release
Group: core-security-release
Keywords: sec-high
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: