Closed Bug 740442 Opened 9 years ago Closed 9 years ago

ALIASEDVAR Patch: Assertion failure: [infer failure] Missing type pushed 0: float, at jsinfer.cpp:352

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED

People

(Reporter: decoder, Assigned: luke)

References

Details

(Keywords: assertion, testcase)

The following test asserts on mozilla-central revision 7ed31daf07bd with patch from bug 740259 (options -m -n -a):


function g1() {}
function g2() 
function Int8Array () {}   
function f1(other) {
    eval("gc(); h = g1");
    for(var i=0; i<20; i++) {
        i = i.name;
    }
}
f1(g2);
I'll add the testcase to the batch.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 740445
Fixed by new patch in bug 740445 -> FIXED
Resolution: DUPLICATE → FIXED
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/testBug740442.js.
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.