Closed Bug 645666 Opened 9 years ago Closed 9 years ago

TI+JM: Assertion failure: prevInline_, at ../jsinterpinlines.h:91

Categories

(Core :: JavaScript Engine, defect)

defect
Not set

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Unassigned)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

150 bytes, application/x-javascript
Details
$ ./js -n -a -m test.js
Assertion failure: prevInline_, at ../jsinterpinlines.h:91
Attached file Test case
There was a design problem where when expanding inlined frames we would try to compile any inlined scripts which did not have JIT code.  This compilation could itself trigger other recompilations, which would make a reentrant attempt to expand any inline frames, sending things into chaos.

The below rev makes sure that any time we generate code with inline frames, we have compiled code for all the inlined callees and can make expandInlineFrames non-reentrant.

http://hg.mozilla.org/projects/jaegermonkey/rev/f6a77f725bbc
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.