Closed
Bug 383255
Opened 17 years ago
Closed 17 years ago
"Assertion failure: JS_UPTRDIFF(fp->sp, fp->spbase) <= depthdiff"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
People
(Reporter: jruderman, Assigned: brendan)
References
Details
(Keywords: assertion, regression, testcase)
Attachments
(1 file, 1 obsolete file)
|
4.77 KB,
patch
|
igor
:
review+
|
Details | Diff | Splinter Review |
js> <x/>[0]++
Assertion failure: JS_UPTRDIFF(fp->sp, fp->spbase) <= depthdiff, at jsinterp.c:347
This is a regression from within the last day or so.
|
||
Comment 1•17 years ago
|
||
This is a regression from bug 383188.
Assignee: general → igor
Blocks: 383188
|
Assignee | |
Comment 2•17 years ago
|
||
Sorry I didn't catch this: the tmp slot must be added to the stack budget before cs->nuses are "popped" by UpdateDepth.
/be
|
|
Assignee | |
Comment 3•17 years ago
|
||
I'll take care of this, my bad review is to blame.
/be
|
|
Assignee | |
Comment 4•17 years ago
|
||
Thanks to Igor for pointing out that now-useless code.
/be
Attachment #267237 -
Attachment is obsolete: true
Attachment #267240 -
Flags: review?(igor)
Attachment #267237 -
Flags: review?(igor)
|
|
||
Updated•17 years ago
|
Attachment #267240 -
Flags: review?(igor) → review+
|
|
Assignee | |
Comment 5•17 years ago
|
||
Fixed:
js/src/jsemit.c 3.255
/be
Status: ASSIGNED → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
|
||
Comment 6•17 years ago
|
||
/cvsroot/mozilla/js/tests/e4x/Regress/regress-383255.js,v <-- regress-383255.js
initial revision: 1.1
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•