The default bug view has changed. See this FAQ.

IonMonkey: Assertion failure: interval->start() < pos && pos <= interval->end(), at ion/LinearScan.cpp:903

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: jandem, Assigned: jandem)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
ion/testDivision.js asserts with --ion-eager, and I got the same assert last week with a modfied math-cordic.
(Assignee)

Comment 1

5 years ago
Created attachment 577547 [details] [diff] [review]
Fix

When we split an interval, we scan its uses for any register requirements or hints. The problem here was that we found both a "fixed register" hint and a "fixed register" requirement, and fixedOpIsHint was not set to false.
Attachment #577547 - Flags: review?(dvander)
Attachment #577547 - Flags: review?(dvander) → review+
(Assignee)

Comment 2

5 years ago
http://hg.mozilla.org/projects/ionmonkey/rev/a45187efd0b5
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.