729809 - IonMonkey: Assertion failure: (objBits >> 47) == 0, at ../../jsval.h:782

Status: RESOLVED DUPLICATE of bug 728188

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on ionmonkey revision 5a04fd69aa09 (run with --ion -n -m --ion-eager), tested on 64 bit:


function TestCase(n, d, e, a)
function writeHeaderToLog( string ) {
}
var SECTION = "7.3-1";
testcase = new TestCase( SECTION,
			 "" );
const libdir = "/srv/repos/ionmonkey/js/src/jit-test/lib/";
evaluate("\
load(libdir + 'asserts.js');\
function testcase(obj, fn) {\
    assertThrowsInstanceOf(function () { (this  (  )   . m  . abstract        ++   ); }, TypeError);\
}\
function test(obj) {\
    testcase(obj, Set.prototype.delete, 12);\
}\
test({});\
test(null);\
test(undefined);\
");