Closed Bug 646006 Opened 9 years ago Closed 9 years ago
TI: Assertion failure: stubs
Generated < MAX _PIC _STUBS, at ./methodjit/Poly IC .cpp:2103
The attached testcase asserts on TI tip when run with -n -m -a (tested on 64 bit). The testcase switched asserts and also crashed several times, it's likely to be some kind of memory corruption.
Yes, this is corruption. The checks we previously did to see if a recompilation occurred in the middle of an IC call (invalidating the IC and forcing it to terminate) are insufficient with scripted call inlining, as if we expand any inlined frames then the JITScript we get back afterwards might be for a different script (and we think no recompilation occurred and proceed to trash memory). This removes the recompilations counter from JITScript, and changes the ICs to bail out if any recompilation or frame expansion occurred on any script/frame in the compartment (which are rare events anyways). http://hg.mozilla.org/projects/jaegermonkey/rev/453c2dcce09e
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.