Closed Bug 1277732 Opened 7 years ago Closed 7 years ago

Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target

Categories

(Core :: JavaScript: GC, defect)

Product:
Core
Component:
JavaScript: GC
Platform:
Other
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
mozilla50
Tracking Flags:
Tracking Status
firefox50 --- fixed

People

(Reporter: sk.alvin.x, Assigned: sk.alvin.x)

Details

(Keywords: 64bit, assertion)

Attachments

(1 file)

memory-assert-fix.patch
629 bytes, patch
jorendorff
: review+
Details | Diff | Splinter Review 
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

Steps to reproduce:

compile trunck code on arm64 and run 


Actual results:

js-engine crashed with assertion failure


Expected results:

js-engine terminte normally
Keywords: 64bit, assertion
OS: Unspecified → Other
Hardware: Unspecified → Other
Summary: Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 → [ARM64] Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439
OS: Other → Linux
Summary: [ARM64] Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 → Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target
Attachment #8759442 - Flags: review?(jorendorff)
Comment on attachment 8759442 [details] [diff] [review]
memory-assert-fix.patch

Review of attachment 8759442 [details] [diff] [review]:
-----------------------------------------------------------------

Thank you.
Attachment #8759442 - Flags: review?(jorendorff) → review+
Attachment #8759442 - Flags: checkin?(jorendorff)
Pushed by cbook@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/fc2c0cb9c6a8
"Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target". r=jorendorff
My bad, should have caught that during review. Thanks for fixing!
Assignee: nobody → sk.alvin.x
Status: UNCONFIRMED → ASSIGNED
Component: JavaScript Engine → JavaScript: GC
Ever confirmed: true
Attachment #8759442 - Flags: checkin?(jorendorff)
https://hg.mozilla.org/mozilla-central/rev/fc2c0cb9c6a8
Status: ASSIGNED → RESOLVED
Closed: 7 years ago
status-firefox50: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla50
You need to log in before you can comment on or make changes to this bug.