Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target

RESOLVED FIXED in Firefox 50

Status

()

defect
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: sk.alvin.x, Assigned: sk.alvin.x)

Tracking

({64bit, assertion})

Trunk
mozilla50
Other
Linux
Points:
---

Firefox Tracking Flags

(firefox50 fixed)

Details

Attachments

(1 attachment)

Assignee

Description

3 years ago
User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36

Steps to reproduce:

compile trunck code on arm64 and run 


Actual results:

js-engine crashed with assertion failure


Expected results:

js-engine terminte normally
Assignee

Updated

3 years ago
Keywords: 64bit, assertion
OS: Unspecified → Other
Hardware: Unspecified → Other
Summary: Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 → [ARM64] Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439
Assignee

Updated

3 years ago
OS: Other → Linux
Summary: [ARM64] Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 → Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target

Updated

3 years ago
Attachment #8759442 - Flags: review?(jorendorff)
Comment on attachment 8759442 [details] [diff] [review]
memory-assert-fix.patch

Review of attachment 8759442 [details] [diff] [review]:
-----------------------------------------------------------------

Thank you.
Attachment #8759442 - Flags: review?(jorendorff) → review+
Assignee

Updated

3 years ago
Attachment #8759442 - Flags: checkin?(jorendorff)

Comment 2

3 years ago
Pushed by cbook@mozilla.com:
https://hg.mozilla.org/integration/mozilla-inbound/rev/fc2c0cb9c6a8
"Assertion failure: 0xffff800000000000ULL & (uintptr_t(desired) + length - 1) == 0, at Memory.cpp:439 on aarch64 target". r=jorendorff
My bad, should have caught that during review. Thanks for fixing!
Assignee: nobody → sk.alvin.x
Status: UNCONFIRMED → ASSIGNED
Component: JavaScript Engine → JavaScript: GC
Ever confirmed: true
Attachment #8759442 - Flags: checkin?(jorendorff)

Comment 4

3 years ago
bugherder
https://hg.mozilla.org/mozilla-central/rev/fc2c0cb9c6a8
Status: ASSIGNED → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla50
You need to log in before you can comment on or make changes to this bug.