IonMonkey: Assertion failure: interval->start() < pos && pos < interval->end(), at LinearScan.cpp:1238

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: jandem, Assigned: jandem)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Assignee)

Description

6 years ago
Created attachment 590165 [details] [diff] [review]
Patch

setPropTypeGuard.js and Frame-onStep-07.js fail with this assert.

The problem is that LCallSetPropertyT does not use at-start for its operands. We can fix the instruction to use *AtStart, but I think we should do what you suggested a while ago: make call instruction operands default to at-start.
Attachment #590165 - Flags: review?(dvander)
Attachment #590165 - Flags: review?(dvander) → review+
(Assignee)

Comment 1

6 years ago
https://hg.mozilla.org/projects/ionmonkey/rev/fe0c029a7bc4
Status: ASSIGNED → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.