Comment #1 on issue 2326 by [email protected]: Fatal error:
CHECK(BailoutId(data->OsrAstId()->value()) == ast_id) failed
http://code.google.com/p/v8/issues/detail?id=2326
I think the function where it's going wrong is filterIndex(bounds). In
particular, it seems like one of the if-statement conditionals is
completely ignored:
// Fast incremental update based on previous hi index.
if (hi1 > hi0) {
for (i = Math.max(lo1, hi0), j = hi1; i < j; ++i) {
filters[k = index[i]] ^= one;
added.push(k);
}
}
I've tried inserting console.log statements here and this block seems to
execute when hi1 <= hi0, leading to incorrect results.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
