Closed Bug 1269346 Opened 8 years ago Closed 3 years ago

|args.isConstructing()| does not match |constructing| in BaselineIC.cpp

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED INVALID
Tracking Flags:
Tracking Status
firefox49 --- affected

People

(Reporter: sandervv, Unassigned)

Details

if you add |MOZ_ASSERT(args.isConstructing() == constructing);| before line https://dxr.mozilla.org/mozilla-central/rev/1461a4071341c282afcf7b72e33036412d2251d4/js/src/jit/BaselineIC.cpp#5812, you'll get an assertion error.

This prevented me from using |args.isConstructing()| in |GetTemplateObjectForNative|.

Old bug, no longer valid after CacheIR rewrite.

Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.