Closed Bug 756776 Opened 13 years ago Closed 13 years ago

IonMonkey: Assertion failure: needsBarrier_, at ../../jscompartment.h:141

Categories

(Core :: JavaScript Engine, defect)

Other Branch
x86_64
Linux
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 756235

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, testcase, Whiteboard: [fuzzblocker] [jsbugmon:update,ignore])

The following testcase asserts on ionmonkey revision 890dd17b4187 (run with --ion -n -m): try { reportCompare(expectCompile, actualCompile, summary + ': compile actual'); } catch(ex) {} var lfcode = new Array(); lfcode.push("gczeal(4);"); lfcode.push("try { jsTestDriverEnd(); } catch(exc1) {}"); lfcode.push("const libdir = \"/srv/repos/ionmonkey/js/src/jit-test/lib/\";"); lfcode.push("\ var appendToActual = function(s) {\ actual += s + ',';\ gczeal = function() { }\ "); lfcode.push("\ for (var power = 0; power < 20; ((function() {}).abstract)) {\ var mag = \"ECMA_2\";\ continue; \ gc( start, (new Date(( mag = Infinity || this ) )).getTimezoneOffset() );\ }\ "); var lfRunTypeId = -1; while (true) { var file = lfcode.shift(); if (file == undefined) { break; } loadFile(file); } function loadFile(lfVarx) { try { if (lfVarx.substr(-3) != ".js") { switch (lfRunTypeId) { case 4: eval("(function() { " + lfVarx + " })();"); break; default: evaluate(lfVarx); } } } catch (lfVare) { } }
Whiteboard: [jsbugmon:update] → [jsbugmon:update][fuzzblocker]
JSBugMon: The testcase found in this bug no longer reproduces (tried revision 80e4ab0d24bc).
Whiteboard: [jsbugmon:update][fuzzblocker] → [fuzzblocker] [jsbugmon:update,ignore]
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
Group: core-security
A testcase for this bug was already added in the original bug (bug 756235).
Flags: in-testsuite-
You need to log in before you can comment on or make changes to this bug.