Closed
Bug 884630
Opened 11 years ago
Closed 11 years ago
Assertion failure: !minimalInterval(interval), at ion/BacktrackingAllocator.cpp with "use asm"
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 900437
People
(Reporter: gkw, Unassigned)
References
Details
(Keywords: assertion, regression, testcase)
(function (stdlib, n, heap) {
"use asm"
var Float32ArrayView = new stdlib.Float32Array(heap)
function f(i0, d1) {
i0 = i0 | 0
d1 = +d1
switch (2) {
case -3:
i0 = 0
case -2:
{
(Float32ArrayView[0 >> 2]) = (.0 % +(((0xe >> ((i0 | 0) / ((i0 - (!(3))) | 0))))))
}
}((((i0) - ((d1) != (+((((.0) < (.0))) | 0))))))
}
return f
})()
asserts js debug shell on m-c changeset d2a7cfa34154 with --ion-regalloc=backtracking at Assertion failure: !minimalInterval(interval), at ion/BacktrackingAllocator.cpp
|
Reporter | |
Comment 1•11 years ago
|
||
autoBisect shows this is probably related to the following changeset:
The first bad revision is:
changeset: http://hg.mozilla.org/mozilla-central/rev/a5d90cd59be8
user: Luke Wagner
date: Fri Mar 22 15:02:08 2013 -0700
summary: Bug 851964 - Re-enable OdinMonkey on OSX (r=vlad)
Not sure if this is correct.
Blocks: 851964
Flags: needinfo?(luke)
|
|
||
Comment 2•11 years ago
|
||
While Odin is generating the input IR, I'd expect this to be a bug in the backtracking allocator (I assume it doesn't repro with without --ion-regalloc=backtracking?).
Flags: needinfo?(luke)
|
||
Comment 4•11 years ago
|
||
I can confirm this is the same underlying bug as bug 900437.
Status: NEW → RESOLVED
Closed: 11 years ago
Flags: needinfo?(bhackett1024)
Resolution: --- → DUPLICATE
|
|
Reporter | |
Updated•11 years ago
|
Flags: in-testsuite?
You need to log in
before you can comment on or make changes to this bug.
Description
•