Closed Bug 617458 Opened 9 years ago Closed 9 years ago

TypeInference: Assertion failure: !synced()

Categories

(Core :: JavaScript Engine, defect)

defect
Not set

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: bhackett)

References

(Blocks 1 open bug)

Details

(Whiteboard: fixed-in-jaegermonkey)

Attachments

(1 file)

----
function f(x) {
    var a = 4 | x;
    a = +a;
}
f(10);
----
Assertion failure: !synced(), at ../methodjit/RematInfo.h:275
Attached patch fixSplinter Review
Bogus assert.

http://hg.mozilla.org/projects/jaegermonkey/rev/b6cef988a4c0
Assignee: general → bhackett1024
Whiteboard: fixed-in-jaegermonkey
Blocks: infer-regress
No longer blocks: TypeInference
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.