Last Comment Bug 712265 - [Chunk Patch] Assertion failure: lval.isBoolean(), at js/src/jsinterp.cpp:4739
: [Chunk Patch] Assertion failure: lval.isBoolean(), at js/src/jsinterp.cpp:4739
: assertion, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: Other Branch
: x86 Linux
-- critical (vote)
: ---
Assigned To: Brian Hackett (:bhackett)
: Jason Orendorff [:jorendorff]
Depends on:
Blocks: langfuzz 706914
  Show dependency treegraph
Reported: 2011-12-20 04:53 PST by Christian Holler (:decoder)
Modified: 2013-01-14 07:59 PST (History)
3 users (show)
choller: in‑testsuite+
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Description User image Christian Holler (:decoder) 2011-12-20 04:53:03 PST
The following test asserts on mozilla-central f3c943d2e763 with chunk patch (bug 706914) (options -m -n -a -e 'mjitChunkLimit(5)'):

try { 
  let (t1 = x) assertEq(x, 5); 
}  finally {}
Comment 1 User image Brian Hackett (:bhackett) 2011-12-21 08:44:59 PST
The stack pointer was wrong when entering finally blocks from exceptions thrown inside a different compilation chunk.  Fixed in the latest bug 706914 patch.
Comment 2 User image Christian Holler (:decoder) 2013-01-14 07:59:46 PST
A testcase for this bug was automatically identified at js/src/jit-test/tests/jaeger/chunk/bug712265.js.

Note You need to log in before you can comment on or make changes to this bug.