Closed Bug 1522254 Opened 6 years ago Closed 6 years ago

ARM64: Crash in atomics/mutual-exclusion.js

Categories

(Core :: JavaScript Engine: JIT, defect, P2)

Product:
Core
Component:
JavaScript Engine: JIT
Platform:
ARM64
Unspecified
Type:
defect

Tracking

()

Status:
RESOLVED FIXED
Tracking Flags:
Tracking Status
firefox-esr60 --- wontfix
firefox64 --- wontfix
firefox65 --- wontfix
firefox66 --- fixed

People

(Reporter: sstangl, Unassigned)

References

Details

(Keywords: crash, Whiteboard: [arm64:m3])

When run on ARM64 hardware, this test fails: atomics/mutual-exclusion.js

The arguments passed are as follows:

--baseline-eager atomics/mutual-exclusion.js
--ion-eager --ion-offthread-compile=off --more-compartments atomics/mutual-exclusion.js

The crash signature is as follows:

Hit MOZ_CRASH(NYI) at /home/sstangl/dev/gecko-dev/js/src/jit/arm64/CodeGenerator-arm64.cpp:1733

That line number corresponds to CodeGenerator::visitMemoryBarrier.

[arm64:m3] because we should fix reproducible test crashes before letting ARM64 Fennec Nightly ride the trains to Beta.

status-firefox64: --- → wontfix
status-firefox65: --- → wontfix
status-firefox66: --- → affected
status-firefox-esr60: --- → wontfix
Keywords: crash
Whiteboard: [arm64:m3]

This now passes on ARM64 hardware. It was fixed by the other atomics/ work.

It will still crash on the simulator, because the simulator does not simulate atomic instructions.

Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.