1885205 - MOZ_CRASH(Unrecognized jump instruction.) at jit/arm64/Assembler-arm64.cpp:499

Status: RESOLVED DUPLICATE of bug 1857207

(Core :: JavaScript Engine: JIT, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: ASan stack

I don't have a good testcase for this. If this is not s-s, please feel free to open up.

I've attached an ASan stack trace, as this may be related to bug 1857207.

Run with --fuzzing-safe --wasm-compiler=baseline --no-asmjs --fast-warmup --trial-inlining-warmup-threshold=0 --execute="setJitCompilerOption(\"ion.forceinlineCaches\",1)" --ion-warmup-threshold=0 --ion-edgecase-analysis=off --blinterp-eager --blinterp-warmup-threshold=1 --more-compartments --nursery-strings=off --spectre-mitigations=on --ion-offthread-compile=off --gc-zeal=25,160 --baseline-warmup-threshold=0, compile with AR=ar sh ../configure --enable-address-sanitizer --enable-fuzzing --disable-jemalloc --with-ccache --enable-nspr-build --enable-ctypes --enable-gczeal --enable-rust-simd --disable-tests, tested on m-c rev 4f7a5399c1cc.

Setting s-s to be safe in case the ASan stack reveals anything. Matt, you mentioned in bug 1857207 comment 4 that more information is needed, do you see any in the stack?

Comment 1

[Matthew Gaudet (he/him) [:mgaudet]]

This is the same unconditional assert as Bug 1857207, let's track that there.

Comment 2

[Matthew Gaudet (he/him) [:mgaudet]]

Attachment: WIP: Bug 1885205 - Debug instrumentation patch for gary

Comment 3

[Phabricator Automation]

Comment on attachment 9392113 [details]
WIP: Bug 1885205 - Debug instrumentation patch for gary

Revision D205122 was moved to bug 1857207. Setting attachment 9392113 [details] to obsolete.