Closed
Bug 654665
Opened 15 years ago
Closed 15 years ago
TI: Assertion failure: !slotEscapes(slot), at ./jsanalyze.h:1041
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
The following testcase asserts on TI revision 3062ff7fef83 (run with -m -n -a),
tested on 64 bit:
test();
function test()
{
for (var i = 0; i < 0e2.length; );
}
Comment 1•15 years ago
|
||
WFM, fixed I think by rev e5d548c51427. While determining whether to hoist a .length computation we would die when checking whether a constant is a loop invariant (it is!).
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → WORKSFORME
| Reporter | ||
Comment 2•13 years ago
|
||
Automatically extracted testcase for this bug was committed:
https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•