Closed
Bug 803723
Opened 12 years ago
Closed 12 years ago
IonMonkey: Assertion failure: hasAnalysis(), at ../jsinferinlines.h:1727
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 800568
People
(Reporter: decoder, Unassigned)
Details
(Keywords: assertion, testcase, Whiteboard: [ion:p1:fx19][jsbugmon:ignore])
Attachments
(1 file)
|
5.98 KB,
application/zip
|
Details |
The attached testcase asserts on mozilla-central revision 0ff60bfb3442 (run with --ion-eager).
|
||
Updated•12 years ago
|
Whiteboard: [ion:p1]
|
Reporter | |
Comment 1•12 years ago
|
||
Marking s-s because this test is very fragile and I don't know the reason for that :)
Whiteboard: [ion:p1] → [ion:p1][jsbugmon:ignore]
|
|
Reporter | |
Comment 2•12 years ago
|
||
Need a security rating here, hard to tell what is wrong or if this is security-relevant at all.
Flags: needinfo?(dvander)
|
|
||
Updated•12 years ago
|
Whiteboard: [ion:p1][jsbugmon:ignore] → [ion:p1:fx19][jsbugmon:ignore]
|
||
Comment 3•12 years ago
|
||
dvander ping :)
|
|
||
Comment 4•12 years ago
|
||
Bump.
|
|
||
Updated•12 years ago
|
Flags: needinfo?(nihsanullah)
|
|
||
Comment 5•12 years ago
|
||
We need to chase down a guess-rating here.
Looks like bug 800568 fixed this.
Status: NEW → RESOLVED
Closed: 12 years ago
Flags: needinfo?(dvander)
Resolution: --- → DUPLICATE
|
|
||
Updated•12 years ago
|
Flags: needinfo?(nihsanullah)
|
||
Updated•9 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•