Closed Bug 705251 Opened 10 years ago Closed 10 years ago

IonMonkey: "Assertion failure: isLowered()"

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: jandem)

References

(Blocks 1 open bug)

Details

Attachments

(1 file, 1 obsolete file)

A modified version of bitops-bits-in-byte asserts with

Assertion failure: isLowered(), at ion/MIR.h:408
Attached patch Fix (obsolete) — Splinter Review
The problem was that we removed MPassArg for |this|, but didn't unwrap it in inheritUnwrapArgs. Also fixes ion/inlining/inline-callarg-bailout.js
Attachment #576906 - Flags: review?(cdleary)
Attached patch FixSplinter Review
The right version this time.
Attachment #576906 - Attachment is obsolete: true
Attachment #576906 - Flags: review?(cdleary)
Attachment #576907 - Flags: review?(cdleary)
Attachment #576907 - Flags: review?(cdleary) → review+
http://hg.mozilla.org/projects/ionmonkey/rev/f3068b10487b
Status: ASSIGNED → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.