686396 - TI: Assertion failure: [infer failure] Missing type for this: bool, at jsinfer.cpp:341

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following test crashes on jaegermonkey branch revision 0b9a541b2e0a (options -m -n -a):


(function () { 
  assertEquals = function assertEquals(expected, found, name_opt) {  };
})();
function testOne(receiver, key, result) {
  for(var i = 0; i != 10; i++ ) {
    assertEquals(result, receiver[key]());
  }
}
function TypeOfThis() { return typeof this; }
Number.prototype.type = TypeOfThis;
String.prototype.type = TypeOfThis;
Boolean.prototype.type = TypeOfThis;
testOne(2.3, 'type', 'object');
testOne('x', 'type', 'object');
testOne(true, 'type', 'object');

Comment 1

[Christian Holler (:decoder)]

Retested on m-c, cannot reproduce there anymore so closing as WFM.

Comment 2

[Christian Holler (:decoder)]

A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug686396.js.