Closed
Bug 640078
Opened 15 years ago
Closed 15 years ago
TI: "Assertion failure: !state.stack[i].hasDouble,"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, testcase, Whiteboard: fixed-in-jaegermonkey)
Attachments
(1 file)
|
3.72 KB,
text/plain
|
Details |
eval("\
try{}\
catch(w if(function(){})){4067286856}\
")
asserts js debug shell on JM changeset adc45b0a01c8 at Assertion failure: !state.stack[i].hasDouble, with -m, -n and -a
|
||
Updated•15 years ago
|
Blocks: infer-regress
|
|
||
Comment 1•15 years ago
|
||
Bogus assert, checking that we don't forget about pushed constant doubles around exception paths (where an opcode can have a deeper stack than its immediate predecessor). This won't be a problem though because the hasDouble state is only used for INITELEMs popping doubles (which won't get entangled with stack entries for thrown exceptions).
http://hg.mozilla.org/projects/jaegermonkey/rev/e39b459497a9
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
Whiteboard: fixed-in-jaegermonkey
|
||
Comment 2•13 years ago
|
||
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug640078.js.
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•