973615 - Assertion failure: Integer input should be equal or higher than Lowerbound., at it/IonMacroAssembler.cpp:1223

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on mozilla-central revision f6ab28f98ee5 (x86 ARM simulator build, run with --fuzzing-safe --ion-eager --ion-regalloc=backtracking --ion-check-range-analysis):


setObjectMetadataCallback(function(obj) {});
function foo() {
function do_abs(x) {
    return Math.abs(x);
}
for (var i=1 ; i<50 ; i++)
    do_abs(-1.5);
undefined + "o";
} foo();

Comment 1

[Christian Holler (:decoder)]

Seems like this has already been fixed in newer versions, marking WFM.