Closed
Bug 723023
Opened 12 years ago
Closed 12 years ago
IonMonkey: Assertion failure: analysis->jumpTarget(pc), at ion/TypeOracle.cpp:156
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: jandem, Assigned: jandem)
References
Details
Attachments
(1 file)
7.16 KB,
patch
|
bhackett1024
:
review+
|
Details | Diff | Splinter Review |
Assignee | ||
Comment 1•12 years ago
|
||
The LOOPENTRY pc does not always have incoming jumps (do-while loops, for-loops without a condition etc). This passes the loopHead pc to newOsrPreheader and uses it for getNewTypesAtJoinPoint.
Attachment #593335 -
Flags: review?(bhackett1024)
Updated•12 years ago
|
Attachment #593335 -
Flags: review?(bhackett1024) → review+
Assignee | ||
Comment 2•12 years ago
|
||
hg.mozilla.org/projects/ionmonkey/rev/11cf975db153
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•