663573 - IonMonkey: Assertion failure: numSuccessorsWithPhis == 1, at IonAnalysis.cpp:494

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Andrew Drake [:adrake]]

Attachment: Patch v0

Test case:

function loop() {
 do { } while (0);
}
loop();

Yields assert in summary. The patch changes the assert to be <= 1, as some blocks may not have any phis.

Comment 1

[David Anderson [:dvander] - inactive, e-mail if emergency]

Comment on attachment 538650 [details] [diff] [review]
Patch v0

Phew, I thought our invariant was broken!

Comment 2

[Andrew Drake [:adrake]]

http://hg.mozilla.org/users/danderson_mozilla.com/ionmonkey/rev/92d0bcca27d2