475413 - ABC file fails new verifier, worked under old verifier

Status: VERIFIED DUPLICATE of bug 461316

(Tamarin Graveyard :: Baseline JIT (CodegenLIR), defect)

Description

[Tom Harwood]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.5) Gecko/2008120122 Firefox/3.0.5
Build Identifier: 

Attached ABC file verified and executed correctly under old verifier; fails to verify with 1068 error under new verifier.
 

Reproducible: Always

Steps to Reproduce:
1. Run attached .ABC2 file. 

Actual Results:  
VerifyError: Error #1068: int and * cannot be reconciled.

Details in attached console log.


Expected Results:  
$ avm GetSetExtended.abc
Access private var:Array Passed.
Access private var:int Passed.


.ABC2 file was produced by running the GlobalOptimizer over the ABC.

Comment 1

[Tom Harwood]

Attachment: Console log with verbose verifier pass.

Comment 2

[Tom Harwood]

Attachment: Optimized ABC2 file

Comment 3

[Tom Harwood]

Attachment: Original ABC file

Comment 4

[Tom Harwood]

Attachment: AS3 source code

Comment 5

[Jeff Dyer]

The attached abc file fails similarly with tamarin-central and tamarin-redux before the verifier change. Do you have another test case that is known to pass on tamarin-central, at least, but better yet on tamarin-redux before the verifier change?

Jd

Comment 6

[Jeff Dyer]

Indeed the attached trace output shows a valid merge error: int and * don't merge, even on a forward edge.

Jd

Comment 7

[Tom Harwood]

This bug is resolved by other patches to the verifier.