Closed
Bug 741199
Opened 13 years ago
Closed 13 years ago
IonMonkey: Assertion failure: thing, at ../jsgcinlines.h:61
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
WORKSFORME
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
The following testcase asserts on ionmonkey revision e96d5b1f47b8 (run with --ion -n -m):
var a = new Array(1000 * 100);
var i = a.length;
while (i-- != 0) {}
gc();
(({ }).break--);
|
Reporter | |
Comment 1•13 years ago
|
||
Does no longer seem to reproduce, Gary, can you bisect this too? :)
|
|
Reporter | |
Comment 2•13 years ago
|
||
I cannot even reproduce this on the original revision anymore. Closing as WFM. If there is still an issue left we will hopefully find it again.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → WORKSFORME
|
|
Reporter | |
Comment 3•12 years ago
|
||
Automatically extracted testcase for this bug was committed:
https://hg.mozilla.org/mozilla-central/rev/2e891e0db397
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•