477133 - VerifyError in function that has unreachable code

Status: VERIFIED INVALID

(Tamarin Graveyard :: Virtual Machine, defect)

Description

[Jeff Dyer]

Steps to reproduce:
1. Download sample file E.as, and compile it with the Flex compiler with "mxmlc E.as".  E.as includes this code -- a function that does an unconditional "return", and then, after that, there is some unreachable code that does two "for" loops -- the first one declares a variable inline, and the second one reuses the varlable that was declared in the first one:

        public function E()
        {
            return;

            for (var i:int=0; i<10; ++i)
                ;

            for (i=0; i<10; ++i)
                ;
        }

2. Run it in the debug flash player
 
 Actual Results:
Error at runtime:

    VerifyError: Error #1068: int and * cannot be reconciled.

         at E()

  Expected Results:
No error.
 
 Workaround (if any):
Comment out the code after the "return", since it's unreachable anyways.
Transferred Comments:

Brent Baker - Wed Jun 04 07:20:19 CDT 2008
Able to reproduce verifier error running via avm shell.

Jeff Dyer - Thu Feb 05 16:46:00 CST 2009
This is related to https://bugzilla.mozilla.org/show_bug.cgi?id=461316

Jd


This bug transferred from: http://bugs.adobe.com/jira/browse/ASC-3378

Comment 1

[Jeff Dyer]

Recommending that this bug be removed as a blocker of april tr->tc merge. It is one instance of a larger bug (413522) that should be fixed but can probably skip the next merge.

Jd

Comment 2

[Lars T Hansen]

Assuming the verifier semantics are what they are, isn't this an ASC bug?  Back to jeff for triage.

Comment 4

[Brent Baker]

testcase required in tamarin if this is a tamarin issue and not an ASC issue.

Comment 5

[Jeff Dyer]

Closing. See https://bugs.adobe.com/jira/browse/ASC-3378