Closed Bug 617433 Opened 10 years ago Closed 10 years ago

TypeInference: (x >>> 3.14) asserts with isInt32()

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: bhackett1024)

References

(Blocks 1 open bug)

Details

(Whiteboard: fixed-in-jaegermonkey)

Attachments

(1 file)

$ ./js -m
js> (x >>> 3.14);
Assertion failure: isInt32(), at ../jsvalue.h:584
Summary: (x >>> 3.14) asserts with isInt32() → Inference: (x >>> 3.14) asserts with isInt32()
Summary: Inference: (x >>> 3.14) asserts with isInt32() → TypeInference: (x >>> 3.14) asserts with isInt32()
Attached patch fixSplinter Review
Thanks!

http://hg.mozilla.org/projects/jaegermonkey/rev/1ef66ceff8d5
Assignee: general → bhackett1024
Whiteboard: fixed-in-jaegermonkey
Blocks: infer-regress
No longer blocks: TypeInference
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.