Closed Bug 618849 Opened 9 years ago Closed 9 years ago

TypeInference: Assertion failure: !isCopied()

Categories

(Core :: JavaScript Engine, defect)

x86
macOS
defect
Not set

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: fixed-in-jaegermonkey)

---
function f() {
    function g() {
        var b = x;
        var c = b++ & b;
        return c;
    }
    var x = x--;
    return g();
}
assertEq(f(), 0);
---
Asserts ./js -m:
Assertion failure: !isCopied(), at ../methodjit/FrameEntry.h:244
Blocks: infer-regress
No longer blocks: TypeInference
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.