Closed Bug 452170 Opened 11 years ago Closed 11 years ago

TM: "Assertion failure: (*m != JSVAL_INT) || isInt32(*vp)" with negative zero

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Assigned: dvander)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, regression, testcase)

./js -j
js> for (var j = 0; j < 4; ++j) { (-0).toString(); }

Assertion failure: (*m != JSVAL_INT) || isInt32(*vp), at jstracer.cpp:1380

js shell built from tracemonkey branch
Pushed fix as changeset c070800935e2.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Summary: "Assertion failure: (*m != JSVAL_INT) || isInt32(*vp)" with negative zero → TM: "Assertion failure: (*m != JSVAL_INT) || isInt32(*vp)" with negative zero
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-452170.js,v  <--  regress-452170.js
initial revision: 1.1

http://hg.mozilla.org/mozilla-central/rev/840ba4b4ac8f
Flags: in-testsuite+
Flags: in-litmus-
Assignee: general → danderson
You need to log in before you can comment on or make changes to this bug.