Closed Bug 503648 Opened 15 years ago Closed 15 years ago

TM: Different values with testcase containing for...each, const

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 503818

People

(Reporter: gkw, Unassigned)

Details

(Keywords: testcase)

v = 0
let(f = function (g) {
    for each(let h in g) {
        const c = (h -= (function () {
            for each(var d in ['']) {
                print('' + (h))
            }
        })(v))
    }
}) {
    f([0, '', 1e81, '', '', ''])
}


Note the extra NaN in the JIT output.

=====

$ ~/Desktop/tm-30032-c8489ee35bb2/js-opt-tm-intelmac 
js> v = 0
0
js> let(f = function (g) {
    for each(let h in g) {
        const c = (h -= (function () {
            for each(var d in ['']) {
                print('' + (h))
            }
        })(v))
    }
}) {
    f([0, '', 1e81, '', '', ''])
}
0

1e+81



js> 

$ ~/Desktop/tm-30032-c8489ee35bb2/js-opt-tm-intelmac -j
js> v = 0
0
js> let(f = function (g) {
    for each(let h in g) {
        const c = (h -= (function () {
            for each(var d in ['']) {
                print('' + (h))
            }
        })(v))
    }
}) {
    f([0, '', 1e81, '', '', ''])
}
0

1e+81


NaN
js>
Flags: blocking1.9.2?
Appears to be a dup of bug 503818 based on program form, bug behavior. Also appears to be fixed on tip.
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
Flags: in-testsuite?
Clearing the nom flag as this is a dup of a blocker.
Flags: blocking1.9.2?
Bug in removed tracer code, setting in-testsuite- flag.
Flags: in-testsuite? → in-testsuite-
You need to log in before you can comment on or make changes to this bug.