BaselineCompiler: "Assertion failure: false (Unexpected recompile check!),"

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: gkw, Unassigned)

Tracking

(Blocks: 2 bugs, {assertion, regression, testcase})

Other Branch
x86_64
Mac OS X
assertion, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [jsbugmon:update])

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
Created attachment 724718 [details]
stack

a = []
function f() {
    return a[0]
}
function g() {
    return f()()
}
a.push(([function() {
    ([f(), g()])
}])[0])
g()

asserts js debug shell on ionmonkey changeset f0f398255b65 without any CLI arguments at Assertion failure: false (Unexpected recompile check!),
(Reporter)

Comment 1

5 years ago
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   124891:f0f398255b65
tag:         tip
user:        Jan de Mooij
date:        Wed Mar 13 23:06:43 2013 +0100
summary:     Bug 848849 - Reset script use count when type information changes. r=bhackett
Blocks: 848849
(Reporter)

Comment 2

5 years ago
Fixed likely by backout of bug 848849 here:

http://hg.mozilla.org/projects/ionmonkey/rev/a34329707345
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
(Reporter)

Updated

5 years ago
Flags: in-testsuite?
You need to log in before you can comment on or make changes to this bug.