808529 - IonMonkey: Assertion failure: [barrier verifier] Unmarked edge: <unknown>, at jsgc.cpp:5331

Status: RESOLVED DUPLICATE of bug 808067

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on mozilla-central revision 2937fd8e35a1 (run with --ion-eager):


function TestCase(n, d, e, a)
  this.passed = getTestCaseResult(e, a);
function reportCompare (expected, description) {
  var testcase = new TestCase("unknown-test-name", description, expected, '');
}
function getTestCaseResult(expected, actual)
    dump = (function () {});
gcslice(0);
gcslice(1);
gc();
var f;
reportCompare((let ( Function = this ) f), '' + ": }}}}}");
reportCompare('', '' + ": alert(6); } alert(5);");
reportCompare('', '' + ": } {");
gczeal(4);
new TestCase("", " (threw " +")", '', '');

Comment 1

[Christian Holler (:decoder)]

Nevermind this, it's a dup to bug 808067 (asserts differently on debug build).