Closed
Bug 639910
Opened 13 years ago
Closed 13 years ago
NoTraceJIT build is orange due to bug557070.js
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: paul.biggar, Assigned: paul.biggar)
Details
(Whiteboard: [fixed-in-tracemonkey])
Attachments
(1 file, 1 obsolete file)
|
1.84 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
$ ./js /Users/pbiggar/work/mozilla/fix_notracejit/js/src/jit-test/tests/jaeger/bug557070.js -m -j Assertion failure: !fp->hasCallObj() && !fp->hasArgsObj(), at ../jsinterp.cpp:648 Segmentation fault when configured with --enable-debug --disable-tracejit The test should fail with "Internal error: too much recursion" instead. Any suggestions where to look for this?
|
Assignee | |
Comment 1•13 years ago
|
||
Looks like that assertion shouldn't trigger is ok is false. I changed it above too since it looks like it'll have the same problem. The correct error now appears.
Assignee: general → pbiggar
Attachment #517808 -
Flags: review?(dvander)
|
|
Assignee | |
Comment 2•13 years ago
|
||
When JS_CHECK_RECURSION uses goto error, the assertion doesn't hit.
Attachment #517808 -
Attachment is obsolete: true
Attachment #517808 -
Flags: review?(dvander)
Attachment #517840 -
Flags: review?(dvander)
|
||
Updated•13 years ago
|
Attachment #517840 -
Flags: review?(dvander) → review+
|
|
Assignee | |
Comment 3•13 years ago
|
||
http://hg.mozilla.org/tracemonkey/rev/d3961f0a2ade
Whiteboard: [fixed-in-tracemonkey]
|
||
Comment 4•13 years ago
|
||
http://hg.mozilla.org/mozilla-central/rev/d3961f0a2ade
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•