Closed Bug 452724 Opened 12 years ago Closed 12 years ago

TM: Assertion failed: (rmask(rr) & FpRegs) != 0

Categories

(Core :: JavaScript Engine, defect, critical)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: jruderman, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, crash, testcase)

js -j     
js> (function() { for (var j=0;j<5;++j) { (0/0) in this; } })()

Assertion failed: (rmask(rr) & FpRegs) != 0 (nanojit/Nativei386.cpp:738)


js -j 
js> for (var j=0;j<5;++j) { (0/0) in this; }

Crash [@ TraceRecorder::getThis]


The assertion is *similar* to the one in bug 452703, and the crash is the same as the one in bug 452495.
Pushed fixes as changesets 5c0e120cb9b9 and followup a65f235ff6b8.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Summary: Assertion failed: (rmask(rr) & FpRegs) != 0 → TM: Assertion failed: (rmask(rr) & FpRegs) != 0
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-452724-01.js,v  <--  regress-452724-01.js
initial revision: 1.1

/cvsroot/mozilla/js/tests/js1_5/Regress/regress-452724-02.js,v  <--  regress-452724-02.js
initial revision: 1.1

http://hg.mozilla.org/mozilla-central/rev/caee2f7f0657
Flags: in-testsuite+
Flags: in-litmus-
You need to log in before you can comment on or make changes to this bug.