IonMonkey: Assertion failure: current->entryResumePoint()->numOperands() == nargs + info().nlocals() + 1, at IonBuilder.cpp:332

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: jandem, Assigned: jandem)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
Created attachment 587268 [details] [diff] [review]
Patch

We have to set the scope chain slot when inlining. The TypeOracle's canEnterInlinedScript ensures the scope chain is not used by the inlined script, so I think it's safe to always set it to undefined.

This fixes 11 jit-test failures with --ion -n.
Attachment #587268 - Flags: review?(bhackett1024)
Attachment #587268 - Flags: review?(bhackett1024) → review+
(Assignee)

Comment 1

5 years ago
http://hg.mozilla.org/projects/ionmonkey/rev/717081f8e7e5
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.