Status: Accepted Owner: [email protected] Labels: Type-Bug Priority-Medium
New issue 969 by [email protected]: Assertion failure in deoptimizer-ia32.cc
http://code.google.com/p/v8/issues/detail?id=969 It seems hard to reproduce, but sometimes I see the following assert fail: === debug array-splice === Path: mjsunit/array-splice --- stderr --- # # Fatal error in src/ia32/deoptimizer-ia32.cc, line 197 # CHECK(fixed_size + height_in_bytes == input_frame_size) failed # -- v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev
