IonMonkey: OOM Testing: Assertion failure: nslots_ == slotsWritten_, at js/src/ion/Snapshots.cpp:363

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: decoder, Assigned: jandem)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Other Branch
x86_64
Linux
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
The following command asserts on ionmonkey revision 8c54899dae82 (dbg build):

js  -e 'const libdir = "js/src/jit-test/lib/";' -A 12287 -f js/src/jit-test/tests/collections/Map-scale.js
(Reporter)

Comment 1

5 years ago
Still valid with ballast patch, new -A value on revision 88ea2e529609 is 8556.
(Assignee)

Comment 2

5 years ago
Created attachment 625933 [details] [diff] [review]
Patch

Check encodeSlots return value (it's "false" if graph.addConstantToPool failed).
Assignee: general → jdemooij
Status: NEW → ASSIGNED
Attachment #625933 - Flags: review?(dvander)
Attachment #625933 - Flags: review?(dvander) → review+
(Assignee)

Comment 3

5 years ago
https://hg.mozilla.org/projects/ionmonkey/rev/f97392df3374
(Assignee)

Updated

5 years ago
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.