495699 - TM: Assertion failure: original == thisv - js1_5/Regress/regress-462989.js - browser only

Status: VERIFIED FIXED

(Core :: JavaScript Engine, defect)

Description

[Bob Clary [:bc] (inactive)]

tracemonkey && mozilla-central so far.

Assertion failure: original == thisv, at /work/mozilla/builds/1.9.1-tracemonkey/mozilla/js/src/jstracer.cpp:6737

js1_5/Regress/regress-462989.js

http://test.bclary.com/tests/mozilla.org/js/js-test-driver-standards.html?test=js1_5%2FRegress%2Fregress-462989.js;language=type;text/javascript


js1_5/Regress/regress-463782.js

http://test.bclary.com/tests/mozilla.org/js/js-test-driver-standards.html?test=js1_5%2FRegress%2Fregress-463782.js;language=type;text/javascript

looking for the regressor now.

Comment 1

[Bob Clary [:bc] (inactive)]

regressor
http://hg.mozilla.org/tracemonkey/rev/6355d89f05dc
bug 495563

Comment 2

[Bob Clary [:bc] (inactive)]

this made it onto mozilla-1.9.1 as well.

Comment 3

[Andreas Gal :gal]

I can't reproduce either assert with TM tip. Maybe the hotfix is missing? Does your test build include:

http://hg.mozilla.org/releases/mozilla-1.9.1/rev/e5fe9c68d8d3

?

Comment 4

[Bob Clary [:bc] (inactive)]

It should have. I bisected from tracemonkey tip and I reproduced with a fresh tracemonkey build before doing the bisection. Note this is browser only.

Comment 5

[Bob Clary [:bc] (inactive)]

confirmed assert on 1.9.1, 1.9.1 tracemonkey, 1.9.2 browser on mac with fresh builds on both test cases.

Comment 6

[Mike Beltzner [:beltzner, not reading bugmail]]

I bet TM asserts should block, but maybe this regression test isn't something we need to worry about? Wishful thinking? :)

Comment 7

[Andreas Gal :gal]

Attachment: patch

I hate wrappers. And inner and outer object.

Comment 9

[Andreas Gal :gal]

http://hg.mozilla.org/tracemonkey/rev/f5e7ed3980ee

Comment 10

[Robert Sayre]

http://hg.mozilla.org/mozilla-central/rev/f5e7ed3980ee

Comment 11

[Robert Sayre]

http://hg.mozilla.org/releases/mozilla-1.9.1/rev/e292a34f8844

Comment 12

[Bob Clary [:bc] (inactive)]

v 1.9.1, 1.9.2