729804 - IonMonkey: Assertion failure: JSOp(*pc) == JSOP_CALL, at ../ion/TypeOracle.h:156

Status: RESOLVED DUPLICATE of bug 724751

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on ionmonkey revision 5a04fd69aa09 (run with --ion -n -m --ion-eager), tested on 64 bit:


var optionNames = options().split(',');
for (var i = 0; i < optionNames.length; i++)  {
  var optionName = optionNames[i];
  options(optionName);
var lfcode = new Array();
lfcode.push("var g = newGlobal('new-compartment');\
g.eval('(' + function () { dbg = new Debugger(debuggeeGlobal);\
    adbg.onExceptionUnwind = function (frame, exc) {}; } + ')();');\
");
	var file = lfcode.shift(); if (file == undefined) { break; }
                loadFile(file);
}
function loadFile(lfVarx) {
	try {
			evaluate(lfVarx);
	} catch (lfVare) {
	}
}

Comment 1

[David Anderson [:dvander] - inactive, e-mail if emergency]

This is a bogus assert, made more bogus by the fact that it changes the options disabling -n and using unsupported code paths - I'll just dupe this against bug 724751 which will remove the dummy oracle.