Closed
Bug 875476
Opened 12 years ago
Closed 12 years ago
Assertion failure: isNumber(), at dist/include/js/Value.h
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla24
People
(Reporter: gkw, Assigned: bhackett1024)
References
Details
(Keywords: assertion, regression, testcase, Whiteboard: [fuzzblocker] [jsbugmon:])
Attachments
(3 files)
"D"/true
asserts js debug shell on m-c changeset 22bb671d4982 with --no-baseline --ion-eager at Assertion failure: isNumber(), at dist/include/js/Value.h
This is happening fairly frequently so setting as a fuzzblocker. autoBisect is running.
|
||
Updated•12 years ago
|
Whiteboard: [fuzzblocker][jsbugmon:update] → [fuzzblocker] [jsbugmon:]
|
|
||
Comment 1•12 years ago
|
||
JSBugMon: Cannot process bug: Unable to automatically reproduce, please track manually.
|
Reporter | |
Comment 2•12 years ago
|
||
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: 132678:63b006573c65
user: Brian Hackett
date: Wed May 22 11:36:29 2013 -0600
summary: Bug 870052 - Various tweaks to reduce recompilation on asm.js style apps, r=jandem.
Blocks: 870052
Flags: needinfo?(bhackett1024)
|
|
||
Comment 3•12 years ago
|
||
|
Assignee | |
Comment 4•12 years ago
|
||
EvaluateConstantOperands is rather particular about the inputs it will accept, though it's easier to just fix this in the caller.
Assignee: general → bhackett1024
Attachment #754820 -
Flags: review?(jdemooij)
Flags: needinfo?(bhackett1024)
|
||
Updated•12 years ago
|
Attachment #754820 -
Flags: review?(jdemooij) → review+
|
|
Assignee | |
Comment 5•12 years ago
|
||
|
||
Comment 6•12 years ago
|
||
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla24
You need to log in
before you can comment on or make changes to this bug.
Description
•