1522303 - ARM64: Crash in wasm/timeout/interrupt-multi-instance-activation.js

Status: RESOLVED DUPLICATE of bug 1522300

(Core :: JavaScript Engine: JIT, defect, P2)

Description

[Sean Stangl [:sstangl]]

When run on ARM64 hardware, this test fails: wasm/timeout/interrupt-multi-instance-activation.js

The arguments passed are as follows:

--ion-eager --ion-offthread-compile=off --more-compartments wasm/timeout/interrupt-multi-instance-activation.js
--ion-eager --ion-offthread-compile=off --ion-check-range-analysis --ion-extra-checks --no-sse3 --no-threads wasm/timeout/interrupt-multi-instance-activation.js
--baseline-eager wasm/timeout/interrupt-multi-instance-activation.js
--no-wasm-ion wasm/timeout/interrupt-multi-instance-activation.js
--test-wasm-await-tier2 wasm/timeout/interrupt-multi-instance-activation.js

The crash signature is as follows:

Thread 1 "js" received signal SIGILL, Illegal instruction.
0x00001797266310ac in ?? ()
(gdb) x/8i $pc-12
   0x1797266310a0:	ldr	x16, [x23, #40]
   0x1797266310a4:	cmp	x16, x8
   0x1797266310a8:	b.cc	0x1797266310b0  // b.lo, b.ul, b.last
=> 0x1797266310ac:	.inst	0xd4a00000 ; undefined
   0x1797266310b0:	sub	sp, sp, #0x40
   0x1797266310b4:	ldr	x23, [sp, #72]
   0x1797266310b8:	ldr	x8, [x23, #80]
   0x1797266310bc:	ldr	x9, [x23, #96]

The signature looks similar to Bug 1522302.

Comment 1

[Chris Peterson [:cpeterson]]

[arm64:m3] because we should fix reproducible test crashes before letting ARM64 Fennec Nightly ride the trains to Beta.