Closed
Bug 550328
Opened 16 years ago
Closed 16 years ago
VerifyError when using logical operators inside of a typeof expression
Categories
(Tamarin Graveyard :: Virtual Machine, defect)
Tracking
(Not tracked)
VERIFIED
FIXED
Future
People
(Reporter: cpeyer, Unassigned)
References
Details
Not an injection, verified with avmshell r3943
as:
var undef = 4;
actual = typeof (0 || undef);
actual = typeof (1 && undef);
actual = typeof (!this ? 0 : undef);
result - VerifyError #1068:
verify global$init()
outer-scope = null
[global * *] {} ()
0:getlocal0
[global * *] {} (global)
1:pushundefined
[global * *] {} (global void)
2:setslot 1
[global * *] {} ()
4:abs_jump 4059272 83
[global * *] {} ()
0:getlocal0
[global * *] {} (global)
1:pushscope
[global * *] {global} ()
2:debugfile "t.as"
[global * *] {global} ()
4:debugline 1
[global * *] {global} ()
6:pushbyte 4
[global * *] {global} (int)
8:getglobalscope
[global * *] {global} (int global)
9:swap
[global * *] {global} (global int)
10:setslot 1
[global * *] {global} ()
12:debugline 2
[global * *] {global} ()
14:findproperty {public,t.as$1}::actual
[global * *] {global} (Object)
16:pushbyte 0
[global * *] {global} (Object int)
18:dup
[global * *] {global} (Object int int)
19:convert_b
[global * *] {global} (Object int Boolean)
20:iftrue 28
------------------------------------
MERGE FIRST B28: [global * *] {global} (Object int)
------------------------------------
[global * *] {global} (Object int)
24:pop
[global * *] {global} (Object)
25:getglobalscope
[global * *] {global} (Object global)
26:getslot 1
[global * *] {global} (Object *)
------------------------------------
MERGE CURRENT 26: [global * *] {global} (Object *)
MERGE TARGET B28: [global * *] {global} (Object int)
VerifyError: Error #1068: int and * cannot be reconciled.
Flags: in-testsuite?
Flags: flashplayer-triage+
Flags: flashplayer-qrb?
|
Reporter | |
Comment 1•16 years ago
|
||
qe note: undo skipping of test in testconfig.txt: spidermonkey/js1_5/Exceptions/regress-333728
Flags: flashplayer-qrb? → flashplayer-qrb+
Target Milestone: --- → Future
|
|
||
Comment 2•16 years ago
|
||
fixed by bug 413522
Status: NEW → RESOLVED
Closed: 16 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•