Closed Bug 583681 Opened 14 years ago Closed 14 years ago

JM: "Assertion failure: idval.isString(),"

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
All
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: gkw, Assigned: cdleary)

References

Details

(Keywords: assertion, regression, testcase)

Function[typeof h] asserts js debug shell on JM changeset 2ee92d697741 with -m at Assertion failure: idval.isString(), at ../methodjit/PolyIC.cpp:1684
Only occurs on 32-bit with ICs enabled.
Hardware: All → x86
Assignee: general → cdleary
Status: NEW → ASSIGNED
Looks like it was fixed along with another getelem PIC bug, doesn't repro at tip.
WFM as well on tip.
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → WORKSFORME
Automatically extracted testcase for this bug was committed: https://hg.mozilla.org/mozilla-central/rev/efaf8960a929
Flags: in-testsuite+
You need to log in before you can comment on or make changes to this bug.