IonMonkey: Assertion failure: [infer failure] Missing type pushed 0: float, at jsinfer.cpp:316

RESOLVED WORKSFORME

Status

()

Core
JavaScript Engine
--
critical
RESOLVED WORKSFORME
5 years ago
26 days ago

People

(Reporter: decoder, Unassigned)

Tracking

(Blocks: 2 bugs, {assertion, sec-high, testcase})

Trunk
x86_64
Linux
assertion, sec-high, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [jsbugmon:])

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
Created attachment 728989 [details]
Testcase for shell

The attached testcase asserts on mozilla-central revision 3acbf951b3b1 (run with --ion-eager).
(Reporter)

Comment 1

5 years ago
Very fragile test, will try to bisect but not sure if that will work. Marked s-s because infer failures can be critical and the test uses gczeal.
Blocks: 724444
Whiteboard: [jsbugmon:update,bisect]
Assuming sec-high because inference.
Keywords: sec-high
(Reporter)

Updated

5 years ago
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:bisect]
(Reporter)

Comment 3

5 years ago
JSBugMon: Cannot process bug: Error: Failed to compile specified revision 3acbf951b3b1 (maybe try another?)
(Reporter)

Updated

5 years ago
Whiteboard: [jsbugmon:bisect] → [jsbugmon:]
(Reporter)

Comment 4

5 years ago
JSBugMon: Bisection requested, failed due to error: Error: Failed to compile specified revision 3acbf951b3b1 (maybe try another?)
It looks like bisection failed, as predicted.  Is there anything else that you can do here decoder?

Failing that, could some IonMonkey person look into this?
I'm going to close this as WFM. The test was fragile and I can't reproduce this issue, but more importantly TI has been more-or-less completely rewritten over the past 6 months (bug 804676 and others).

Furthermore, this "Missing type pushed" message is also gone.
Status: NEW → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → WORKSFORME

Updated

2 years ago
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.