Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now) Reporter
	Description • 14 years ago

[].x >>= a | 0

asserts js debug shell on JM changeset 3700c42a8e82 with -m at Assertion failure: !fe->type.isConstant(), at ../methodjit/FrameState-inl.h:387

	David Anderson [:dvander] - inactive, e-mail if emergency
	Comment 1 • 14 years ago

regression from bug 578517 ?

	Chris Leary [:cdleary] (not checking bugmail) Assignee
	Comment 2 • 14 years ago

(In reply to comment #1)
> regression from bug 578517 ?

Most likely. Looking...

	Chris Leary [:cdleary] (not checking bugmail) Assignee
	Comment 3 • 14 years ago

Missed an obvious case in the rush to get mas perf!

	David Anderson [:dvander] - inactive, e-mail if emergency
	Comment 4 • 14 years ago

Comment on attachment 461209 [details] [diff] [review]
Add extra case.

Can we fit this into the unknown_unknown case instead? It looks like this would be a smaller fix.

	Chris Leary [:cdleary] (not checking bugmail) Assignee
	Comment 5 • 14 years ago

(In reply to comment #4)
> Can we fit this into the unknown_unknown case instead?

Sure -- breaks the nice two-tuple method names tho. unknown_unknownOrInt seem ok?

	David Anderson [:dvander] - inactive, e-mail if emergency
	Comment 6 • 14 years ago

yeah, or _any

	David Anderson [:dvander] - inactive, e-mail if emergency
	Comment 8 • 14 years ago

Comment on attachment 461279 [details] [diff] [review]
Fold (unknown, int) case into (unknown, unknown).

thanks!

	Chris Leary [:cdleary] (not checking bugmail) Assignee
	Comment 9 • 14 years ago

http://hg.mozilla.org/users/danderson_mozilla.com/moo/rev/27b2c8b23ff3

	Christian Holler (:decoder)
	Comment 10 • 12 years ago

A testcase for this bug was automatically identified at js/src/jit-test/tests/jaeger/bug582900.js.