TM: "Assertion failure: !ti->stackTypeMap.matches(ti_other->stackTypeMap)" #3

RESOLVED FIXED

Status

()

defect
--
critical
RESOLVED FIXED
11 years ago
11 years ago

People

(Reporter: jruderman, Assigned: dvander)

Tracking

(Blocks 1 bug, {assertion, testcase})

Trunk
x86
macOS
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +
in-litmus -

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment, 1 obsolete attachment)

for each (let i in [0, 0, 0, "", 0, 0, "", 0, 0, "", 0]) { }

Assertion failure: !ti->stackTypeMap.matches(ti_other->stackTypeMap), at jstracer.cpp:2727
Posted patch proposed fix (obsolete) — Splinter Review
Awesome bug - linked peers must be dependent or else much badness ensues when one gets trashed.
Assignee: general → danderson
Status: NEW → ASSIGNED
Attachment #345461 - Flags: review?(gal)
whoops, forgot to use addUnique
Attachment #345461 - Attachment is obsolete: true
Attachment #345463 - Flags: review?(gal)
Attachment #345461 - Flags: review?(gal)
Attachment #345461 - Flags: review+
Attachment #345461 - Flags: review+
Attachment #345463 - Flags: review?(gal) → review+
Comment on attachment 345463 [details] [diff] [review]
actual proposed fix

Ouch. Yeah add would have been bad.
Pushed fix as changeset: http://hg.mozilla.org/tracemonkey/rev/d148e3a94d2f
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
http://hg.mozilla.org/mozilla-central/rev/37b3fdbb0f07
/cvsroot/mozilla/js/tests/js1_7/regress/regress-462282.js,v  <--  regress-462282.js
initial revision: 1.1
Flags: in-testsuite+
Flags: in-litmus-
You need to log in before you can comment on or make changes to this bug.