Closed
Bug 457778
Opened 17 years ago
Closed 17 years ago
TM: "Assertion failed: cond->isCond()" with "if(undefined < false)"
Categories
(Core :: JavaScript Engine, defect, P1)
Tracking
()
VERIFIED
FIXED
mozilla1.9.1b2
People
(Reporter: jruderman, Assigned: gal)
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
|
1.05 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
$ ./js -j
js> for (var j = 0; j < 4; ++j) { if (undefined < false) { } }
Assertion failed: cond->isCond() (nanojit/Assembler.cpp:1228)
| Reporter | ||
Updated•17 years ago
|
Summary: "Assertion failed: cond->isCond()" with "if(undefined < false)" → TM: "Assertion failed: cond->isCond()" with "if(undefined < false)"
| Assignee | ||
Updated•17 years ago
|
Assignee: general → gal
Flags: blocking1.9.1?
Priority: -- → P1
Target Milestone: --- → mozilla1.9.1b2
| Assignee | ||
Comment 1•17 years ago
|
||
Attachment #342130 -
Flags: review?(danderson)
Updated•17 years ago
|
Attachment #342130 -
Flags: review?(danderson) → review+
| Assignee | ||
Comment 2•17 years ago
|
||
From this day on forward, I shall never write a JIT again without Jesse.
http://hg.mozilla.org/tracemonkey/rev/c3c2752185c3
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
Comment 3•17 years ago
|
||
this still occurs on mozilla-central. when will tm by synced with mc?
Comment 4•17 years ago
|
||
/cvsroot/mozilla/js/tests/js1_5/Regress/regress-457778.js,v <-- regress-457778.js
initial revision: 1.1
http://hg.mozilla.org/mozilla-central/rev/b04c04268a94
Flags: in-testsuite+
Flags: in-litmus-
Flags: blocking1.9.1?
You need to log in
before you can comment on or make changes to this bug.
Description
•