Closed
Bug 473046
Opened 17 years ago
Closed 17 years ago
TM: "Assertion failure: (m != JSVAL_INT) || isInt32(*vp), at ../jstracer.cpp" with watch, pow, eval
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: gkw, Unassigned)
Details
(Keywords: assertion, testcase)
x = 0;
this.watch("x", Math.pow);
(function(){ eval("for (var y = 0; y < 2; ++y) { x++; } "); })()
asserts dbg TM at Assertion failure: (m != JSVAL_INT) || isInt32(*vp), at ../jstracer.cpp:1825 but seems harmless in opt.
Flags: wanted1.9.1?
|
Reporter | |
Comment 1•17 years ago
|
||
Looks similar to the testcase in bug 455413 with an extra eval and ++ increment.
I'm not sure if it's a regression.
Summary: TM: "Assertion failure: (m != JSVAL_INT) || isInt32(*vp), at ../jstracer.cpp" → TM: "Assertion failure: (m != JSVAL_INT) || isInt32(*vp), at ../jstracer.cpp" with watch, pow, eval
|
|
||
Comment 2•17 years ago
|
||
This points to a mismatch of double/int, which is bad. I don't think its safety critical but its not harmless.
|
||
Comment 3•17 years ago
|
||
WFM, tip of TM branch.
Status: NEW → RESOLVED
Closed: 17 years ago
Flags: in-testsuite?
Resolution: --- → WORKSFORME
|
|
Reporter | |
Updated•14 years ago
|
Flags: wanted1.9.1?
You need to log in
before you can comment on or make changes to this bug.
Description
•