Closed
Bug 657304
Opened 14 years ago
Closed 14 years ago
TI: Assertion failure: !fe->data.inRegister(), at methodjit/FrameState-inl.h:922
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
|
813 bytes,
application/x-compressed-tar
|
Details |
The attached testcase asserts on TI revision 693a36f402ee (unpack, chdir and run main.js with -m -n -a), tested on 64 bit.
|
||
Comment 1•14 years ago
|
||
If we did a syncAndForgetEverything within a basic block, we would forget which args and locals are definitely doubles and could load them into normal registers if they are subsequently accessed. It makes more sense to establish the correspondence between inferred and FrameState types of entries when the entries are accessed, not at join points.
http://hg.mozilla.org/projects/jaegermonkey/rev/0cd135eb71a3
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•