Status: Assigned Owner: [email protected] CC: [email protected] Labels: Type-Bug Priority-Critical
New issue 475 by [email protected]: Crash is IC after revision 3041 http://code.google.com/p/v8/issues/detail?id=475 Fuzzing uncovered the following new crash after V8 revision 3041. > eval("(function() { return 1.2e3 | -3/0 % false; })()") # # Fatal error in /usr/local/google/home/ager/v8/src/ic-inl.h, line 86 # CHECK(object->IsString() || object->IsNumber() || object->IsBoolean()) failed # -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev -~----------~----~----~----~------~----~------~--~---
