980126 - Assertion failure: JSID_IS_INT(iden), at dist/include/js/Id.h

Status: RESOLVED FIXED

(Core :: JavaScript Engine: JIT, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

Int32Array(9)["-0"]

asserts js debug shell on m-c changeset 714c8927d6af without any CLI arguments at Assertion failure: JSID_IS_INT(iden), at dist/include/js/Id.h

My configure flags are:

CC="clang -Qunused-arguments" AR=ar CXX="clang++ -Qunused-arguments" sh ./configure --target=x86_64-apple-darwin12.5.0 --enable-optimize --enable-debug --enable-profiling --enable-gczeal --enable-debug-symbols --enable-methodjit --enable-type-inference --disable-tests --with-ccache --disable-threadsafe

=== Tinderbox Build Bisection Results by autoBisect ===

The "good" changeset has the timestamp "20140304112656" and the hash "703bd71926e4".
The "bad" changeset has the timestamp "20140304114257" and the hash "78fa90a29c43".

Likely regression window: https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=703bd71926e4&tochange=78fa90a29c43


Only bug 695438 is in that list, bhackett, is it a likely regressor?

Comment 1

[Brian Hackett [Laid off!]]

This WFM, and the stack is for a different assertion failure.

Comment 2

[Christian Holler (:decoder)]

JSBugMon: The testcase found in this bug no longer reproduces (tried revision d2dac18d0562).

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

This was likely fixed by the follow-up patch in bug 695438.

=== Tinderbox Build Bisection Results by autoBisect ===

The "bad" changeset has the timestamp "20140305112725" and the hash "6cc5a05281c3".
The "good" changeset has the timestamp "20140305113325" and the hash "25bbf68caed4".

Likely fix window: https://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=6cc5a05281c3&tochange=25bbf68caed4