Last Comment Bug 756618 - IonMonkey: OOM Testing: Assertion failure: nslots_ == slotsWritten_, at js/src/ion/Snapshots.cpp:363
: IonMonkey: OOM Testing: Assertion failure: nslots_ == slotsWritten_, at js/sr...
: assertion, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: Other Branch
: x86_64 Linux
-- normal (vote)
: ---
Assigned To: Jan de Mooij [:jandem]
: Jason Orendorff [:jorendorff]
Depends on:
Blocks: 624094
  Show dependency treegraph
Reported: 2012-05-18 13:58 PDT by Christian Holler (:decoder)
Modified: 2012-05-23 05:50 PDT (History)
3 users (show)
See Also:
Crash Signature:
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---

Patch (884 bytes, patch)
2012-05-22 01:57 PDT, Jan de Mooij [:jandem]
dvander: review+
Details | Diff | Splinter Review

Description User image Christian Holler (:decoder) 2012-05-18 13:58:04 PDT
The following command asserts on ionmonkey revision 8c54899dae82 (dbg build):

js  -e 'const libdir = "js/src/jit-test/lib/";' -A 12287 -f js/src/jit-test/tests/collections/Map-scale.js
Comment 1 User image Christian Holler (:decoder) 2012-05-19 06:36:44 PDT
Still valid with ballast patch, new -A value on revision 88ea2e529609 is 8556.
Comment 2 User image Jan de Mooij [:jandem] 2012-05-22 01:57:33 PDT
Created attachment 625933 [details] [diff] [review]

Check encodeSlots return value (it's "false" if graph.addConstantToPool failed).
Comment 3 User image Jan de Mooij [:jandem] 2012-05-23 05:50:15 PDT

Note You need to log in before you can comment on or make changes to this bug.