Closed
Bug 1245162
Opened 8 years ago
Closed 8 years ago
Assertion failure: result ([OOM] Is it really infallible?), at js/src/ds/LifoAlloc.h:281 involving js::jit::MGoto::New
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla47
Tracking | Status | |
---|---|---|
firefox47 | --- | fixed |
People
(Reporter: gkw, Assigned: nbp)
References
Details
(Keywords: assertion, regression, Whiteboard: [jsbugmon:ignore])
Attachments
(1 file)
1.12 KB,
patch
|
sunfish
:
review+
|
Details | Diff | Splinter Review |
+++ This bug was initially created as a clone of Bug #1244828 +++ Nicolas requests that each stack should have it's own bug, blocking meta bug 1244824. Assigning to him by default. Line numbers from m-c rev a1b94785b484: #0 js::LifoAlloc::allocInfallibleOrAssert (this=<optimized out>, n=120) at /home/ubuntu/trees/mozilla-central/js/src/ds/LifoAlloc.h:281 #1 js::jit::TempAllocator::allocateInfallible (this=<optimized out>, bytes=120) at /home/ubuntu/trees/mozilla-central/js/src/jit/JitAllocPolicy.h:40 #2 js::jit::TempObject::operator new (nbytes=120, alloc=...) at /home/ubuntu/trees/mozilla-central/js/src/jit/JitAllocPolicy.h:174 #3 js::jit::MGoto::New (alloc=..., target=<optimized out>) at /home/ubuntu/trees/mozilla-central/js/src/jit/MIR.cpp:1541 #4 0x00000000007a67d8 in js::jit::MTest::foldsTo (this=<optimized out>, alloc=...) at /home/ubuntu/trees/mozilla-central/js/src/jit/MIR.cpp:406 #5 0x0000000000871ced in js::jit::ValueNumberer::simplified (this=0x7f0181548c50, def=0x6a7c808) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:621 #6 js::jit::ValueNumberer::visitControlInstruction (this=0x7f0181548c50, block=0x6a7bdd0, dominatorRoot=0x0) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:842 #7 0x00000000008725fe in js::jit::ValueNumberer::visitBlock (this=0x7f0181548c50, block=0x6a7bdd0, dominatorRoot=0x0) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:968 #8 0x000000000087285b in js::jit::ValueNumberer::visitDominatorTree (this=0x7f0181548c50, dominatorRoot=0x25764b8) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:1008 #9 0x0000000000872b8b in js::jit::ValueNumberer::visitGraph (this=0x7f0181548c50) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:1046 #10 0x0000000000872e55 in js::jit::ValueNumberer::run (this=0x7f0181548c50, updateAliasAnalysis=<optimized out>) at /home/ubuntu/trees/mozilla-central/js/src/jit/ValueNumbering.cpp:1117 #11 0x00000000006a04ce in js::jit::OptimizeMIR (mir=0x25751c0) at /home/ubuntu/trees/mozilla-central/js/src/jit/Ion.cpp:1696 #12 0x00000000006a21f3 in js::jit::CompileBackEnd (mir=0x25751c0) at /home/ubuntu/trees/mozilla-central/js/src/jit/Ion.cpp:2008 #13 0x0000000000b19ad8 in js::HelperThread::handleIonWorkload (this=0x1ca0ff0) at /home/ubuntu/trees/mozilla-central/js/src/vm/HelperThreads.cpp:1276 #14 0x0000000000b190b4 in js::HelperThread::threadLoop (this=0x1ca0ff0) at /home/ubuntu/trees/mozilla-central/js/src/vm/HelperThreads.cpp:1603 #15 0x0000000000bffb0e in nspr::Thread::ThreadRoutine (arg=0x1ca51f0) at /home/ubuntu/trees/mozilla-central/js/src/vm/PosixNSPR.cpp:45 #16 0x00007f01827db6aa in start_thread (arg=0x7f0181549700) at pthread_create.c:333 #17 0x00007f0181851eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
Assignee | ||
Comment 1•8 years ago
|
||
Attachment #8716924 -
Flags: review?(sunfish)
Updated•8 years ago
|
Attachment #8716924 -
Flags: review?(sunfish) → review+
Comment 4•8 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/26277a6d10fe https://hg.mozilla.org/mozilla-central/rev/50b43a29c528
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla47
You need to log in
before you can comment on or make changes to this bug.
Description
•