Closed Bug 756618 Opened 12 years ago Closed 12 years ago

IonMonkey: OOM Testing: Assertion failure: nslots_ == slotsWritten_, at js/src/ion/Snapshots.cpp:363

Categories

(Core :: JavaScript Engine, defect)

Other Branch
x86_64
Linux
defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: decoder, Assigned: jandem)

References

Details

(Keywords: assertion, testcase)

Attachments

(1 file)

The following command asserts on ionmonkey revision 8c54899dae82 (dbg build):

js  -e 'const libdir = "js/src/jit-test/lib/";' -A 12287 -f js/src/jit-test/tests/collections/Map-scale.js
Still valid with ballast patch, new -A value on revision 88ea2e529609 is 8556.
Attached patch PatchSplinter Review
Check encodeSlots return value (it's "false" if graph.addConstantToPool failed).
Assignee: general → jdemooij
Status: NEW → ASSIGNED
Attachment #625933 - Flags: review?(dvander)
Attachment #625933 - Flags: review?(dvander) → review+
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.