AutoWritableJitCode has an almost unused constructor.
Categories
(Core :: JavaScript Engine: JIT, enhancement, P1)
Tracking
()
Tracking | Status | |
---|---|---|
firefox133 | --- | fixed |
People
(Reporter: nbp, Assigned: nbp)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
AutoWritableJitCode has a constructor which is given both an address and a size, and constructor which is given a JitCode which is only used by the Linker.
With Bug 1886557 intent to add data pages, we should remove the non-JitCode versions.
Assignee | ||
Comment 1•6 months ago
|
||
Comment 3•6 months ago
|
||
Backed out for causing JitCode related mass failures.
Please check multiple failure logs, as all failures are caused by this changeset.
Assignee | ||
Comment 4•6 months ago
|
||
The problem seen here is that AutoWrittableJitCode
only mprotect the page as writable, but there is a rare case where the executable allocation is at the very end of a page, while all the code starting from JitCode::raw()
is on another page.
This rare occasion causes the failure seen above, as the JitCodeHeader
is not mapped as writable while the Linker
attempts to write it.
Ideally this field should remain non writable after the Link phase, but given that in the majority of cases where AutoWritableJitCode
is called, it would be, I do not see much risks in making it the default. Also, this would have to be addressed later on in the X-Only project.
I had this fixed in another patch, which apparently did not got merged into this one.
Comment 6•6 months ago
|
||
Backed out for causing multiple failures.
- Push with failures - sm bustages
- Failure Log
- Failure line: TEST-UNEXPECTED-FAIL | js\src\jit-test\tests\gc\bug-1565272.js | Unknown (code 3221225477, args "--fuzzing-safe --ion-offthread-compile=off --ion-warmup-threshold=10 --ion-eager --ion-offthread-compile=off --more-compartments") [1.0 s]
- Push with failures - jit failures
- Failure Log
- Failure line: TEST-UNEXPECTED-FAIL | tests/jit-test/jit-test/tests/arrow-functions/params-default-2.js | (code 139, args "--baseline-eager --write-protect-code=off") [0.1 s]
Assignee | ||
Updated•5 months ago
|
Comment 8•5 months ago
|
||
bugherder |
Description
•