621328 - TypeInference: JM: Kraken stanford-crypto-pbkdf2 regression

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Jan de Mooij [:jandem]]

The problem can be reduced to this:
---
function foo() {
};
function f() {
    var e = foo;
    a = new e();
    assertEq(typeof(a), "object");
    e=a;
}
f();
---
This fails with -m:
typein:6: Error: Assertion failed: got "function", expected "object"

Comment 1

[Jan de Mooij [:jandem]]

The first bad revision is:
changeset:   58793:513c680568de
user:        Brian Hackett <[e-mail]>
date:        Tue Dec 21 07:32:21 2010 -0800
summary:     [INFER] Fixes for jstests, bug 620599, part 1.

Comment 2

[Brian Hackett [Laid off!]]

When recompiling a cached call to an uncached call (to be fixed by bug 621942, also inference should do better on this and not mark 'a' as unknown, which it's doing), we didn't rejoin in the right place and failed to actually call the function.

http://hg.mozilla.org/projects/jaegermonkey/rev/a5f3949c0db7