Closed Bug 647785 Opened 9 years ago Closed 9 years ago

TI+JM: Assertion failure: Call site vanished., at ../methodjit/Retcon.cpp:112

Categories

(Core :: JavaScript Engine, defect)

defect
Not set

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: jandem)

References

(Blocks 1 open bug)

Details

Attachments

(1 file, 1 obsolete file)

-!Int32Array(5)

Asserts with -n -m -a at revision 013df702176d.

The type of Int32Array(5) is missing. The neg operation then causes a recompilation (int -> double) and this time both JSOP_NOT and JSOP_NEG are constant folded and there's nowhere to rejoin.

The problem seems to be with JSOP_NOT pushing a constant 'false' based on known types.
Attached patch Patch (obsolete) — Splinter Review
Attachment #524048 - Flags: review?(bhackett1024)
Attached patch PatchSplinter Review
Attachment #524048 - Attachment is obsolete: true
Attachment #524048 - Flags: review?(bhackett1024)
Attachment #524049 - Flags: review?(bhackett1024)
Attachment #524049 - Flags: review?(bhackett1024) → review+
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.