IonMonkey: Assertion failure: GetObservedType(in) == phi->type(), at IonAnalysis.cpp:423

RESOLVED FIXED

Status

()

defect
RESOLVED FIXED
8 years ago
8 years ago

People

(Reporter: adrake, Assigned: dvander)

Tracking

(Blocks 1 bug)

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

Posted file Test case
The attached test case asserts during type analysis phase on ionmonkey tip.
Posted patch fixSplinter Review
Every time we change a value's specialization, we need to re-analyze any phi dependencies. We don't do this though until we've analyzed at least one phi - the flag was just in the wrong place, so it a specialization changed while analyzing phis for the first time, it wouldn't reflow.
Assignee: general → dvander
Status: NEW → ASSIGNED
Attachment #551793 - Flags: review?(rpearl)
Attachment #551793 - Flags: review?(rpearl) → review+
http://hg.mozilla.org/projects/ionmonkey/rev/f226f89b29e9
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.