Closed Bug 641225 Opened 9 years ago Closed 9 years ago
TI+JM: Assertion failure: failed to find call site, at ../methodjit/Retcon
This assert is rare and hard to reduce, I hope you can reproduce. $ ./js -m -n -a test.js Assertion failure: failed to find call site, at ../methodjit/Retcon.cpp:91
Hmm, I can't get this to reproduce. How does it look under valgrind? The hard-to-reproduce aspect probably means either uses of uninitialized data or the conservative GC are involved.
The original test case does not assert anymore. The new attachment still asserts with -m -a -n at revision 1ce8efbb75cc. Valgrind does not show any messages.
Attachment #518954 - Attachment is obsolete: true
Cool, this asserts for me now.
The recompiler reads each frame's ncode to determine whether it returns into the script being recompiled. The problem is that frames which are evaluated by the interpreter leave this field uninitialized, now that field is NULL'ed out for interpreter frames. http://hg.mozilla.org/projects/jaegermonkey/rev/6dc4e473aa06
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.