1217606 - ARM64: OOM errors in Assembler::emitExtendedJumpTable

Status: RESOLVED FIXED

(Core :: JavaScript Engine: JIT, defect)

Description

[Jakob Stoklund Olesen [:jolesen]]

Build SpiderMonkey with --enable-simulator=arm64.
Run jit_test with "--no-ion --no-asmjs --baseline-eager"

Results: Assertions like:
Assertion failure: prePointer - preOffset == OffsetOfJumpTableEntryPointer, at /Users/jolesen/gecko-dev/js/src/jit/arm64/Assembler-arm64.cpp:127

Failing tests (among others):

js/src/jit-test/tests/gc/oomInParseAsmJS.js
js/src/jit-test/tests/gc/oomInParseFunction.js
js/src/jit-test/tests/gc/oomInWeakMap.js

Comment 1

[Jakob Stoklund Olesen [:jolesen]]

Attachment: Handle OOM in Assembler::emitExtendedJumpTable().

Assertions would trip if the assembler buffer runs out of memory midway
through the jump table.

Comment 2

[Jakob Stoklund Olesen [:jolesen]]

https://treeherder.mozilla.org/#/jobs?repo=try&revision=d39cd32e5145

Comment 3

[Pulsebot]

https://hg.mozilla.org/integration/mozilla-inbound/rev/36e27dc524a4

Comment 4

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/36e27dc524a4