Closed Bug 729809 Opened 13 years ago Closed 13 years ago

IonMonkey: Assertion failure: (objBits >> 47) == 0, at ../../jsval.h:782

Categories

(Core :: JavaScript Engine, defect)

Other Branch
x86_64
Linux
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 728188

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, testcase)

The following testcase asserts on ionmonkey revision 5a04fd69aa09 (run with --ion -n -m --ion-eager), tested on 64 bit: function TestCase(n, d, e, a) function writeHeaderToLog( string ) { } var SECTION = "7.3-1"; testcase = new TestCase( SECTION, "" ); const libdir = "/srv/repos/ionmonkey/js/src/jit-test/lib/"; evaluate("\ load(libdir + 'asserts.js');\ function testcase(obj, fn) {\ assertThrowsInstanceOf(function () { (this ( ) . m . abstract ++ ); }, TypeError);\ }\ function test(obj) {\ testcase(obj, Set.prototype.delete, 12);\ }\ test({});\ test(null);\ test(undefined);\ ");
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.