854418 - IonMonkey: Assertion failure: [infer failure] Missing type pushed 0: float, at jsinfer.cpp:316

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

Attachment: Testcase for shell

The attached testcase asserts on mozilla-central revision 3acbf951b3b1 (run with --ion-eager).

Comment 1

[Christian Holler (:decoder)]

Very fragile test, will try to bisect but not sure if that will work. Marked s-s because infer failures can be critical and the test uses gczeal.

Comment 2

[David Bolter [:davidb] (NeedInfo me for attention)]

Assuming sec-high because inference.

Comment 3

[Christian Holler (:decoder)]

JSBugMon: Cannot process bug: Error: Failed to compile specified revision 3acbf951b3b1 (maybe try another?)

Comment 4

[Christian Holler (:decoder)]

JSBugMon: Bisection requested, failed due to error: Error: Failed to compile specified revision 3acbf951b3b1 (maybe try another?)

Comment 5

[Andrew McCreight [:mccr8]]

It looks like bisection failed, as predicted.  Is there anything else that you can do here decoder?

Failing that, could some IonMonkey person look into this?

Comment 6

[Jan de Mooij [:jandem]]

I'm going to close this as WFM. The test was fragile and I can't reproduce this issue, but more importantly TI has been more-or-less completely rewritten over the past 6 months (bug 804676 and others).

Furthermore, this "Missing type pushed" message is also gone.