Closed Bug 930990 Opened 6 years ago Closed 6 years ago

Assertion failure: consumer->isConsistentFloat32Use(), at jit/IonAnalysis.cpp:933

Categories

(Core :: JavaScript Engine: JIT, defect, critical)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED FIXED
mozilla27

People

(Reporter: decoder, Assigned: bbouvier)

References

(Blocks 1 open bug)

Details

(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update])

Attachments

(2 files)

The following testcase asserts on mozilla-central revision 5a9ac6fed6ff (run with --fuzzing-safe --ion-eager):


do {} while (Math.fround(Math.random()));
Whiteboard: [jsbugmon:update,bisect]
Attached patch bug930990.patchSplinter Review
Slightly changed the test so that it doesn't iloop when working.
Assignee: general → benj
Status: NEW → ASSIGNED
Attachment #822392 - Flags: review?(sstangl)
Attachment #822392 - Flags: review?(sstangl) → review+
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   http://hg.mozilla.org/mozilla-central/rev/03fdc9e5eea3
user:        Benjamin Bouvier
date:        Tue Oct 22 14:51:37 2013 +0200
summary:     Bug 913282: More Float32 operators: comparisons; p=dougc,bbouvier, r=jonco,h4writer

This iteration took 10.817 seconds to run.
And once again, my edge connection is not enough to push :/
Keywords: checkin-needed
https://hg.mozilla.org/mozilla-central/rev/9fbd0d6598a7
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla27
You need to log in before you can comment on or make changes to this bug.