Closed
Bug 725073
Opened 13 years ago
Closed 13 years ago
IonMonkey: Assertion failure: cell->compartment() == comp || cell->compartment() == comp->rt->atomsCompartment, at ../../gc/Barrier-inl.h:196
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 725067
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
The following testcase asserts on ionmonkey revision d66c148e0756 (run with --ion -n -m), tested on 64 bit:
var o0 = [];
var o10 = Math;
function f4(o) { o.g4 = (o);};
for(var i=0; i<20; i++) {
f4(o0);
f4(o10);
}
|
||
Updated•13 years ago
|
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
|
Reporter | |
Comment 2•12 years ago
|
||
A testcase for this bug was already added in the original bug (bug 725067).
Flags: in-testsuite-
You need to log in
before you can comment on or make changes to this bug.
Description
•