Closed Bug 493068 Opened 15 years ago Closed 15 years ago

TM: incorrect execution if too little blacklisting happens

Categories

(Core :: JavaScript Engine, defect, P1)

Product:
Core
Component:
JavaScript Engine
Platform:
x86
macOS
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 493657
Milestone:
mozilla1.9.1

People

(Reporter: bzbarsky, Assigned: gal)

References

(Blocks 1 open bug)

Details

STEPS TO REPRODUCE:

1) Set BL_ATTEMPTS to a number > 2 in jstracer.cpp (I can reproduce the bug with
   it set to 3, but 32 is a good number to try).
2) Recompile your optimized shell.
3) Run it on https://bugzilla.mozilla.org/attachment.cgi?id=377491

EXPECTED RESULTS: Game runs to end and outputs some stats about time taken

ACTUAL RESULTS: foo.js:101: TypeError: myBoard.chainTouchingCountsByChainIdAndStone[i.chainId] is undefined

I wish I had a smaller testcase to offer here...  :(
Flags: blocking1.9.1?
Wow. Scary. This needs a reduction. Please block on it. Jesse, can you help?
Priority: -- → P1
Target Milestone: --- → mozilla1.9.1
I guess one way to fuzz this would be to build two shells with different BL_ATTEMPTS settings and then compare the outcome.
Blocks: 460050
Flags: blocking1.9.1? → blocking1.9.1+
Assignee: general → graydon
Probably a dup. Verifying that as we speak.
Assignee: graydon → gal
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.