Closed
Bug 667601
Opened 14 years ago
Closed 14 years ago
IonMonkey: assertion failure in register allocation
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: rpearl, Assigned: dvander)
References
Details
Attachments
(3 files)
The attached test-case causes an assertion failure while performing greedy register allocation.
Configured with --enable-debug --disable-optimize, and yields:
Assertion failure: !has(reg), at /Users/rpearl/projects/ionmonkey/js/src/ion/IonAssembler.h:168
|
Reporter | |
Comment 1•14 years ago
|
||
|
|
Reporter | |
Comment 2•14 years ago
|
||
|
Assignee | |
Comment 3•14 years ago
|
||
The discouraged set is a hint of which registers to avoid evicting. By default "add" asserts that the register is not already in the set, but we can the same input for both operands.
Attachment #542260 -
Flags: review?
|
|
Assignee | |
Updated•14 years ago
|
Attachment #542260 -
Flags: review? → review?(adrake)
|
||
Updated•14 years ago
|
Attachment #542260 -
Flags: review?(adrake) → review+
|
|
||
Comment 4•14 years ago
|
||
http://hg.mozilla.org/users/danderson_mozilla.com/ionmonkey/rev/b842614cdac7
I messed up the commit author and failed to notice, sorry!
Status: NEW → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•