Updates:
Status: Fixed
Comment #2 on issue 969 by [email protected]: Assertion failure in
deoptimizer-ia32.cc
http://code.google.com/p/v8/issues/detail?id=969
The issue was in deoptimization to a point immediately after an assignment
in an effect context. There was a lingering value on the expression stack
of the unoptimized code which could be observed in various ways (e.g.,
making a call).
Fixed in svn revision 5990 and regression test committed.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev