TM: "Assertion failure: LIR type error (start of writer pipeline): arg 1 of 'eqd' is 'ldi' which has type int32 (expected float64): 0"

RESOLVED DUPLICATE of bug 600128

Status

()

--
critical
RESOLVED DUPLICATE of bug 600128
8 years ago
6 years ago

People

(Reporter: gkw, Assigned: Waldo)

Tracking

(Blocks: 1 bug, {assertion, regression, testcase})

Trunk
x86
Linux
assertion, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite -

Firefox Tracking Flags

(blocking2.0 betaN+, status1.9.2 unaffected, status1.9.1 unaffected)

Details

(Whiteboard: [sg:dupe 600128])

Attachments

(1 attachment)

(Reporter)

Description

8 years ago
function x() {}
V = x;
[x].map(Object.preventExtensions)

function z() {
    if (V.e = 7) {}
}
for each(l in [0, 0, 0, 0, 0, 0, 0, 0, 0]) {
    try {
        z()()
    } catch (e) {}
}

asserts js debug shell on TM changeset 0230a9e80c1f with -j at Assertion failure: LIR type error (start of writer pipeline): arg 1 of 'eqd' is 'ldi' which has type int32 (expected float64): 0
(Reporter)

Comment 1

8 years ago
s-s because this is a LIR type error.
Group: core-security
blocking2.0: --- → ?
(Reporter)

Comment 2

8 years ago
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   54276:aa9b86572020
user:        Jim Blandy
date:        Tue Sep 21 11:35:29 2010 -0700
summary:     Bug 492849 - Implement Object.preventExtensions, Object.isExtensible. a=waldo,jimb, r=brendan
Blocks: 492849
(Reporter)

Comment 3

8 years ago
Created attachment 480481 [details]
more info

hope this helps!
(Reporter)

Comment 4

8 years ago
(In reply to comment #3)
> Created attachment 480481 [details]
> more info
> 
> hope this helps!

I used the technique in bug 579740 comment #3..
status1.9.1: --- → unaffected
status1.9.2: --- → unaffected
Whiteboard: [sg:critical?]

Updated

8 years ago
blocking2.0: ? → betaN+

Updated

8 years ago
Whiteboard: [sg:critical?] → [sg:critical]

Updated

8 years ago
Assignee: general → jwalden+bmo
(Assignee)

Updated

8 years ago
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 600128
Group: core-security
Whiteboard: [sg:critical] → [sg:dupe 600128]
A testcase for this bug was already added in the original bug (bug 600128).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.