Comment #4 on issue 969 by [email protected]: Assertion failure in
deoptimizer-ia32.cc
http://code.google.com/p/v8/issues/detail?id=969
Here is a reduced version of the regression test that causes the crash in
debug mode with --stress-opt --always-opt --stress-runs=10.
function first(x, y) { return x; }
var o = {};
o.x = 0;
x4 = 0;
function test4() { return first((o.x = 1, typeof x4), 2); }
test4();
delete x4;
test4();
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
