Closed Bug 583915 Opened 11 years ago Closed 11 years ago

JM: mochitest-plain assert on content/base/test/test_bug375314.html

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: dmandelin, Assigned: dmandelin)

References

Details

Attachments

(1 file)

Assertion failure: idval.isString(), at c:/builds/mo-d/js/src/../../../../sources/moo/js/src/methodjit/PolyIC.cpp:1679
TEST-UNEXPECTED-FAIL | /tests/content/base/test/test_bug375314.html | Exited with code -1073741819 during test run
Attached patch PatchSplinter Review
The problem was that we were jumping not to the start of a slow path merge block, but to the jump just before it (jumping from the previous merge block to the slow call itself).
Attachment #462286 - Flags: review?(dvander)
Attachment #462286 - Flags: review?(dvander) → review+
http://hg.mozilla.org/projects/jaegermonkey/rev/a2110b68a590
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.