588356 - JM: (64-bit) "Assertion failure: v.isNull(),"

Status: RESOLVED DUPLICATE of bug 587809

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

function f() {
  N = 4
  var mt = Array();
  var mti
  function unsigned32() {}
  this.init_genrand = function() {
    for (i = 1; mt; mti++) {
      mt[mti] = unsigned32([mt] & 5)
    }
  }
} (function() {
  var fuzzMT = new f
  fuzzMT.init_genrand()
} ())


asserts 64-bit debug shell on JM changeset 43e1eedfc1cc with -j at Assertion failure: v.isNull(), at ../jstracer.cpp:2899

Comment 1

[David Mandelin [:dmandelin]]

We need to get this underlying bug fixed promptly. What's the current status? Is there a patch somewhere?

Comment 2

[Robert Sayre]

assigning to dvander, but someone else should take if they have the fix.

Comment 3

[David Anderson [:dvander] - inactive, e-mail if emergency]

This is most likely a dupe of bug 587809 which is an eager-this regression.