Closed
Bug 664422
Opened 14 years ago
Closed 14 years ago
TI: Assertion failure: (ptrBits & 0x7) == 0, at ../jsval.h:711
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
|
590 bytes,
application/x-gzip
|
Details |
The attached testcase asserts on TI revision f59a6cabfbd4 (run with -j -m -n -a), tested on 64 bit.
|
||
Comment 1•14 years ago
|
||
We were monitoring the result of an uncached call that was throwing an exception, which we shouldn't be doing. There was a more basic problem here, though, which is that even if a frame throws its return value shouldn't be torn (nothing *should* observe that rval, but it's good to be tidy). The problem there was that EnterMethodJIT always marked the frame's return value as having been set, even though it isn't when an exception is being thrown.
http://hg.mozilla.org/projects/jaegermonkey/rev/2993dfa0ce4d
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•