TypeInference: Assertion failure: !fe->isType(JSVAL_TYPE_DOUBLE)

RESOLVED FIXED

Status

()

defect
RESOLVED FIXED
9 years ago
9 years ago

People

(Reporter: jandem, Assigned: bhackett)

Tracking

(Blocks 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

---
function f() {
    var x;
    var a = x;
    Boolean(a = Number(12.34));
}
f();
---
Assertion failure: !fe->isType(JSVAL_TYPE_DOUBLE), at ../methodjit/FrameState-inl.h:751
Posted patch fixSplinter Review
Another FP register bug in FrameState::storeTop (yeesh).

http://hg.mozilla.org/projects/jaegermonkey/rev/fcc727676be6
Assignee: general → bhackett1024
Blocks: infer-regress
No longer blocks: TypeInference
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.