756776 - IonMonkey: Assertion failure: needsBarrier_, at ../../jscompartment.h:141

Status: RESOLVED DUPLICATE of bug 756235

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on ionmonkey revision 890dd17b4187 (run with --ion -n -m):


try {
  reportCompare(expectCompile, actualCompile, summary + ': compile actual');
} catch(ex) {}
var lfcode = new Array();
lfcode.push("gczeal(4);");
lfcode.push("try { jsTestDriverEnd(); } catch(exc1) {}");
lfcode.push("const libdir = \"/srv/repos/ionmonkey/js/src/jit-test/lib/\";");
lfcode.push("\
var appendToActual = function(s) {\
    actual += s + ',';\
  gczeal = function() { }\
");
lfcode.push("\
for (var power = 0; power < 20; ((function() {}).abstract)) {\
  var mag = \"ECMA_2\";\
  continue;   \
  gc( start, (new Date(( mag = Infinity || this ) )).getTimezoneOffset() );\
}\
");
var lfRunTypeId = -1;
while (true) {
  var file = lfcode.shift(); if (file == undefined) { break; }
  loadFile(file);
}
function loadFile(lfVarx) {
  try {
    if (lfVarx.substr(-3) != ".js") {
      switch (lfRunTypeId) {
        case 4: eval("(function() { " + lfVarx + " })();"); break;
        default: evaluate(lfVarx);
      }
    }
  } catch (lfVare) {	}
}

Comment 1

[Christian Holler (:decoder)]

JSBugMon: The testcase found in this bug no longer reproduces (tried revision 80e4ab0d24bc).

Comment 3

[Christian Holler (:decoder)]

A testcase for this bug was already added in the original bug (bug 756235).