Closed
Bug 452724
Opened 16 years ago
Closed 16 years ago
TM: Assertion failed: (rmask(rr) & FpRegs) != 0
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: jruderman, Unassigned)
References
Details
(Keywords: assertion, crash, testcase)
js -j js> (function() { for (var j=0;j<5;++j) { (0/0) in this; } })() Assertion failed: (rmask(rr) & FpRegs) != 0 (nanojit/Nativei386.cpp:738) js -j js> for (var j=0;j<5;++j) { (0/0) in this; } Crash [@ TraceRecorder::getThis] The assertion is *similar* to the one in bug 452703, and the crash is the same as the one in bug 452495.
Pushed fixes as changesets 5c0e120cb9b9 and followup a65f235ff6b8.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
Updated•16 years ago
|
Summary: Assertion failed: (rmask(rr) & FpRegs) != 0 → TM: Assertion failed: (rmask(rr) & FpRegs) != 0
Comment 2•16 years ago
|
||
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-452724-01.js,v <-- regress-452724-01.js initial revision: 1.1 /cvsroot/mozilla/js/tests/js1_5/Regress/regress-452724-02.js,v <-- regress-452724-02.js initial revision: 1.1 http://hg.mozilla.org/mozilla-central/rev/caee2f7f0657
Flags: in-testsuite+
Flags: in-litmus-
You need to log in
before you can comment on or make changes to this bug.
Description
•