Closed
Bug 867820
Opened 12 years ago
Closed 11 years ago
IonMonkey: Assertion failure: conversion != MToDouble::NumbersOnly, at ion/Lowering.cpp:1403
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla24
People
(Reporter: decoder, Assigned: bhackett1024)
References
Details
(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update])
Attachments
(2 files, 1 obsolete file)
|
(deleted),
text/plain
|
Details | |
|
(deleted),
patch
|
jandem
:
review+
|
Details | Diff | Splinter Review |
The following testcase asserts on mozilla-central revision 02aa81c59df6 (run with --ion-eager):
function AddTestCase(expect, actual) {
new TestCase(expect, actual);
}
function TestCase(e, a) {
this.expect = e;
getTestCaseResult(e, a);
}
function getTestCaseResult(expected, actual) {
if (actual != expected) {}
}
AddRegExpCases(false, Math.pow(2,31));
AddRegExpCases("", Math.pow(2,30) - 1);
function AddRegExpCases(m, l) {
AddTestCase("");
AddTestCase(m, true);
AddTestCase(l, 0);
}
|
Reporter | |
Updated•12 years ago
|
Whiteboard: [jsbugmon:update,bisect] → [jsbugmon:update]
|
|
Reporter | |
Comment 1•12 years ago
|
||
JSBugMon: Bisection requested, result:
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 130267:909360229cff
user: Brian Hackett
date: Mon Apr 29 13:10:00 2013 -0600
summary: Bug 865431 - Restrict Compare_Double and related comparisons to inputs where they will produce the correct result, r=jandem.
This iteration took 121.339 seconds to run.
|
|
Reporter | |
Comment 3•12 years ago
|
||
|
|
Reporter | |
Comment 4•12 years ago
|
||
Attachment #746153 -
Attachment is obsolete: true
|
Assignee | |
Comment 5•12 years ago
|
||
I think this assert was mostly wishful thinking.
Assignee: general → bhackett1024
Attachment #753276 -
Flags: review?(jdemooij)
|
||
Comment 6•11 years ago
|
||
Comment on attachment 753276 [details] [diff] [review]
patch
Review of attachment 753276 [details] [diff] [review]:
-----------------------------------------------------------------
Would be good to add the testcase in comment 0.
Attachment #753276 -
Flags: review?(jdemooij) → review+
|
|
Assignee | |
Comment 7•11 years ago
|
||
|
||
Comment 8•11 years ago
|
||
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: in-testsuite+
Resolution: --- → FIXED
Target Milestone: --- → mozilla24
You need to log in
before you can comment on or make changes to this bug.
Description
•