Closed Bug 470719 Opened 16 years ago Closed 16 years ago

TM: Assertion failed: "Unknown branch type in nPatchBranch" with lots of string.match

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 471316

People

(Reporter: jruderman, Assigned: gal)

References

()

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

Attached file js shell testcase
Loading http://nymag.com/news/media/50279/ triggers the assertion about 30% of the time.  The attached js shell testcase triggers the assertion reliably, but the testcase itself appears fragile.

Assertion failed: "Unknown branch type in nPatchBranch": 0 (../nanojit/Nativei386.cpp:437)

(Intel Mac, tracemonkey branch)
branch[0] is 59 (0x3b).
Summary: "Assertion failed: "Unknown branch type in nPatchBranch" with lots of string.match → TM: Assertion failed: "Unknown branch type in nPatchBranch" with lots of string.match
I think this can also cause:

Assertion failed: _buf->_thresholdPage (../nanojit/LIR.cpp:166)
Assignee: general → gal
Awesome test case. Thanks.
Jesse, comment #2 is right on point. This is a dup.
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
As noted in 471316 we should switch to a single lirbuf. I am making that bug 471602 blocking this one, since the original bug is filed against tamarin and I can't request it to block 1.9.1, so I will ask this one to block 1.9.1.
Depends on: 471602
Flags: blocking1.9.1?
Flags: blocking1.9.1? → blocking1.9.1+
A testcase for this bug was already added in the original bug (bug 471316).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: