Status: New
Owner: ----
New issue 2831 by [email protected]: Bug in v8 optimizer
http://code.google.com/p/v8/issues/detail?id=2831
I'm working on the dart team and we've encountered (as far as I can tell) a
bug in V8. I've attached v8_bug.js which triggers it (it is a
dart2js-compiled file).
There seems to be a bug in the optimizer. "16" is clearly a positive number:
$ ~/repositories/v8/out/ia32.release/d8 v8_bug.js
v8_bug.js:1546: Illegal argument(s): Length must be a positive integer: 16.
throw $.wrapException(new $.ArgumentError("Length must be a positive
integ
^
Error
at Isolate.wrapException (v8_bug.js:425:11)
at Isolate.List_List (v8_bug.js:1546:13)
at SHA256._HashBase._HashBase$3 (v8_bug.js:1091:30)
at Isolate.SHA256.static.SHA256$ (v8_bug.js:1460:6)
at Isolate.main (v8_bug.js:1740:14)
at v8_bug.js:1851:7
at v8_bug.js:1975:3
I did a git bisect and it seems like this bug was introduced in r15879
(i.e. https://chromiumcodereview.appspot.com/20070005)
Attachments:
v8_bug.js 79.4 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
