Closed Bug 1522269 Opened 5 years ago Closed 5 years ago

ARM64: Crash in cacheir/bug1451984.js

Categories

(Core :: JavaScript Engine: JIT, defect, P2)

ARM64
Unspecified
defect

Tracking

()

RESOLVED DUPLICATE of bug 1521092
Tracking Status
firefox-esr60 --- wontfix
firefox64 --- wontfix
firefox65 --- wontfix
firefox66 --- affected

People

(Reporter: sstangl, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: crash, Whiteboard: [arm64:m3])

When run on ARM64 hardware, this test fails: cacheir/bug1451984.js

The arguments passed are as follows:

--ion-eager --ion-offthread-compile=off --more-compartments cacheir/bug1451984.js
--ion-eager --ion-offthread-compile=off --ion-check-range-analysis --ion-extra-checks --no-sse3 --no-threads cacheir/bug1451984.js

The crash signature is as follows:

Assertion failure: GCPolicy<T>::isValid(ptr), at /home/sstangl/dev/gecko-dev/js/src/dbgarm64/dist/include/js/RootingAPI.h:1007

[arm64:m3] because we should fix reproducible test crashes before letting ARM64 Fennec Nightly ride the trains to Beta.

Keywords: crash
Whiteboard: [arm64:m3]
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.