Closed
Bug 450304
Opened 16 years ago
Closed 16 years ago
TM: asserts logging into gmail
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: dvander, Assigned: dvander)
References
()
Details
Attachments
(1 file, 1 obsolete file)
4.19 KB,
text/plain
|
Details |
assertion is in nanojit, somewhere we're generating an feq(i2f, imm(1)) which is invalid
Comment 1•16 years ago
|
||
Committed fix, please re-test and close if fixed. http://hg.mozilla.org/index.cgi/tracemonkey/rev/cdda9caf1fb2
Assignee: general → danderson
Comment 2•16 years ago
|
||
Whats the status of this bug?
Assignee | ||
Comment 3•16 years ago
|
||
Current tip hard crashes when logging into gmail. Keeping the debugging session open on my laptop in MV.
Attachment #333456 -
Attachment is obsolete: true
Comment 4•16 years ago
|
||
Fixed, at least any for-in badness, by: http://hg.mozilla.org/tracemonkey/index.cgi/rev/b7199324e019 David, can you mark this bug FIXED if gmail works for sure with TM tip? /be
Comment 5•16 years ago
|
||
http://hg.mozilla.org/tracemonkey/index.cgi/rev/b7199324e019 breaks browser startup (n < nfixed).
Comment 6•16 years ago
|
||
(Logging into gmail worked because after rm -rf .mozilla the JIT was defaulting to off)
Comment 7•16 years ago
|
||
The n < cx->fp->script->nfixed assert in TraceRecorder::varval is wrong. The code is using let in a for each in loop that was recorded, but the enclosing JSOP_ENTERBLOCK was not seen. Fixing the assert to use cx->fp->script->nslots instead is easy, but then we get another crash, this time due to test_property_cache being buggy. I'm going to fix that and use this bug to see what's next ;-). /be
Assignee | ||
Comment 8•16 years ago
|
||
Awesome, gmail seems to work with tip now.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Updated•16 years ago
|
Flags: in-testsuite-
Flags: in-litmus-
You need to log in
before you can comment on or make changes to this bug.
Description
•