Closed Bug 680619 Opened 10 years ago Closed 10 years ago
Monkey: Assertion failure: regs .sp == regs .fp()->base(), at jsinterp .cpp:2480 with overflowing JSOP _MUL bailout
Attached test case asserts in JSOP_MUL bailout on ionmonkey tip x86 debug builds, with either register allocator.
Join blocks for if-statements did not have the correct pc.
Assignee: general → dvander
Status: NEW → ASSIGNED
Attachment #555340 - Flags: review?(sstangl)
Attachment #555340 - Flags: review?(sstangl) → review+
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.