Closed
Bug 1617848
Opened 4 years ago
Closed 4 years ago
Assert ObjectGroup addendum is tenured
Categories
(Core :: JavaScript Engine, task, P2)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
mozilla75
Tracking | Status | |
---|---|---|
firefox75 | --- | fixed |
People
(Reporter: anba, Assigned: anba)
Details
Attachments
(1 file)
For bug 1557765, comment 13, I've added a call to JSFunction::setTypeForScriptedFunction()
in CloneFunctionReuseScript()
, but got nonsense results in Ion. Turns out that the ObjectGroup addendum needs to be tenured, but we don't assert this anywhere.
Assignee | ||
Comment 1•4 years ago
|
||
Uses a reinterpret_cast so we don't need to include JSFunction.h
in this
header.
Updated•4 years ago
|
Priority: -- → P2
Pushed by ccoroiu@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/0bdab219dd74 Assert ObjectGroup addendum is tenured. r=jandem
Comment 3•4 years ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla75
You need to log in
before you can comment on or make changes to this bug.
Description
•