Closed Bug 723496 Opened 13 years ago Closed 13 years ago

IonMonkey: Assertion failure: live->empty(), at ion/LinearScan.cpp:670

Categories

(Core :: JavaScript Engine, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: jandem, Assigned: jandem)

References

Details

Attachments

(1 file)

tests/v8-v5/check-earley-boyer.js triggers this assert with --ion -n.
Attached patch Fix (deleted) — Splinter Review
When building snapshots we called useType/usePayload without calling ensureDefined. I tried to assert this using the Lowered flag but it got pretty complicated so I didn't think it was worth the complexity.
Attachment #594098 - Flags: review?(dvander)
Attachment #594098 - Flags: review?(dvander) → review+
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: