Closed Bug 1365480 Opened 8 years ago Closed 8 years ago

Intermittent js/src/jit-test/tests/wasm/memory.js | ASAN:DEADLYSIGNAL (code 1, args "--wasm-always-baseline")

Categories

(Core :: JavaScript Engine: JIT, defect)

Product:
Core
Component:
JavaScript Engine: JIT
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: intermittent-bug-filer, Unassigned)

References

Details

(Keywords: bulk-close-intermittents, intermittent-failure)

Status: NEW → RESOLVED
Closed: 8 years ago
Keywords: bulk-close-intermittents
Resolution: --- → INCOMPLETE
See Also: → 1487022
This is race conditions of Ion off-thread compile. The --ion-eager can cause us to run code with little type info and the addition in memory.js sometimes uses a double. The fix is to add |0 before calling setJitCompileOptions. This fix is landing as part of Bug 1503890.
Resolution: INCOMPLETE → FIXED
You need to log in before you can comment on or make changes to this bug.