Closed
Bug 682210
Opened 13 years ago
Closed 13 years ago
IonMonkey: infinite loop when using greedy
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: h4writer, Assigned: dvander)
References
Details
Attachments
(1 file)
5.25 KB,
patch
|
cdleary
:
review+
|
Details | Diff | Splinter Review |
infinite loop on the following code when using greedy: function test() { for (var x = 1; x < 1; x++) { for (var y=1; y < 1; y++) { } } }
Assignee | ||
Comment 1•13 years ago
|
||
Whoops - for some reason some local state was being saved in a shared data structure, and not cleared, so the same IR node was getting inserted into two blocks which makes inline lists incoherent.
Updated•13 years ago
|
Attachment #555971 -
Flags: review?(cdleary) → review+
Assignee | ||
Comment 2•13 years ago
|
||
http://hg.mozilla.org/projects/ionmonkey/rev/8939f6d48a22
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•