TI: "Assertion failure: !state.stack[i].hasDouble,"

RESOLVED FIXED

Status

()

--
critical
RESOLVED FIXED
8 years ago
6 years ago

People

(Reporter: gkw, Unassigned)

Tracking

(Blocks: 2 bugs, {assertion, testcase})

Trunk
x86
Linux
assertion, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite +

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: fixed-in-jaegermonkey)

Attachments

(1 attachment)

(Reporter)

Description

8 years ago
Created attachment 517966 [details]
stack

eval("\
  try{}\
  catch(w if(function(){})){4067286856}\
")

asserts js debug shell on JM changeset adc45b0a01c8 at Assertion failure: !state.stack[i].hasDouble, with -m, -n and -a
Blocks: 619415
Bogus assert, checking that we don't forget about pushed constant doubles around exception paths (where an opcode can have a deeper stack than its immediate predecessor).  This won't be a problem though because the hasDouble state is only used for INITELEMs popping doubles (which won't get entangled with stack entries for thrown exceptions).

http://hg.mozilla.org/projects/jaegermonkey/rev/e39b459497a9
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → FIXED
Whiteboard: fixed-in-jaegermonkey
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug640078.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.