Closed Bug 844836 Opened 11 years ago Closed 11 years ago

OdinMonkey: Assertion failure: !script()->formalIsAliased(i), at ../vm/Stack-inl.h:254

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
Other Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
major

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: decoder, Unassigned)

References

Details

(Keywords: assertion, testcase, Whiteboard: [jsbugmon:ignore]) 

The following testcase asserts on odinmonkey revision 0e9a09e99a15 (run with --ion-eager):


try {
var buffer = new ArrayBuffer(TOTAL_MEMORY);
} catch(exc) {}
var asm = (function(global, buffer) {
  'use asm';
  function stackSave() j = global.x
  return {};
})({}, buffer);
Gah, I botched the fix for expression closures so that their bodies were just being ignored.  D'oh!
http://hg.mozilla.org/users/lwagner_mozilla.com/odinmonkey/rev/ae85149f32e9
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.