Closed
Bug 691747
Opened 13 years ago
Closed 13 years ago
IM: Assertion failure: which < GetUseCount(script, offset) + (ExtendedUse(script->code + offset) ? 1 : 0) at ../jsanalyze.h:1012
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: decoder, Assigned: dvander)
Details
(Keywords: assertion, testcase)
Attachments
(1 obsolete file)
The following testcase asserts on ionmonkey revision acf3c1fb7c94 (run with --ion -n), tested on 64 bit:
function reportCompare(actual) - ++actual + "'";
var UBound = 0;
var actualvalues = [];
for (var li = 0; li < 6; ++li) addThis();
function addThis() {
UBound++;
for (var i=0; i<UBound; i++) {
reportCompare(actualvalues[i]);
}
}
for (var li = 0; li < 3; ++li) addThis();
|
Assignee | |
Comment 1•13 years ago
|
||
This was a test suite failure.
|
|
Assignee | |
Updated•13 years ago
|
Attachment #566292 -
Flags: review? → review?(cdleary)
|
|
Assignee | |
Comment 2•13 years ago
|
||
Comment on attachment 566292 [details] [diff] [review] fix Subsumed by bug 692213.
Attachment #566292 -
Attachment is obsolete: true
Attachment #566292 -
Flags: review?(cdleary)
|
|
Assignee | |
Updated•13 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
|
Reporter | |
Comment 3•11 years ago
|
||
A testcase for this bug was automatically identified at js/src/jit-test/tests/ion/bug691747.js.
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•