956034 - Assertion failure: MIR instruction returned object with unexpected type, at c:\Users\mozilla\debug-builds\mozilla-central\js\src\jit/IonMacroAssemble .cpp:1223

Status: RESOLVED DUPLICATE of bug 953373

(Core :: JavaScript Engine: JIT, defect)

Description

[Carsten Book [:Tomcat]]

Attachment: windows stack

found via bughunter on http://www.amazon.de/gp/product/B00BIYAO3K/sr=8-1/qid=1387642884/ref=olp_product_details?ie=UTF8&me=&qid=1387642884&seller=&sr=8-1 
(thats something for playstation 4 site it seems) 

Loading this site result in the assertion failure after some seconds

Assertion failure: MIR instruction returned object with unexpected type, at c:\Users\mozilla\debug-builds\mozilla-central\js\src\jit/IonMacroAssemble
.cpp:1223

same as bug 953114 ?

Comment 1

[Jan de Mooij [:jandem]]

Thanks for the report. This is likely a duplicate of bug 953373 (also Amazon).

I just pushed my patch for bug 953373 to Try, will land it when it's green and we can check if it fixes this bug too :)

Comment 2

[Jan de Mooij [:jandem]]

Tomcat, can you verify this works now?

Comment 3

[Carsten Book [:Tomcat]]

(In reply to Jan de Mooij [:jandem] from comment #2)
> Tomcat, can you verify this works now?

verified fixed my crash with the checked in fix

Comment 4

[Jan de Mooij [:jandem]]

(In reply to Carsten Book [:Tomcat] from comment #3)
> verified fixed my crash with the checked in fix

Thanks!