Closed
Bug 756628
Opened 12 years ago
Closed 12 years ago
IonMonkey: OOM Testing: Assertion failure: ion::IsEnabled(cx), at js/src/ion/Ion.cpp:840
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla18
People
(Reporter: decoder, Assigned: terrence)
References
Details
(Keywords: assertion, testcase, Whiteboard: [ion:p2:fx18])
Attachments
(1 file)
|
909 bytes,
patch
|
jonco
:
review+
|
Details | Diff | Splinter Review |
The following command asserts on ionmonkey revision 8c54899dae82 (dbg build):
js -e 'const libdir = "js/src/jit-test/lib/";' -A 6266 -f js/src/jit-test/tests/pic/grandproto.js
|
Reporter | |
Comment 1•12 years ago
|
||
Still valid with ballast patch, same parameters.
I get a failure here but it's slightly different. Stack:
#0 0x00000000004046d4 in JS::Value::toObject (this=0x7ffff63810b0) at ../../jsapi.h:474
#1 0x000000000069b175 in js::StackFrame::constructorThis (this=0x7ffff63810b8) at ../vm/Stack.h:713
#2 0x000000000069cb16 in js::StackFrame::epilogue (this=0x7ffff63810b8, cx=0xe07930) at /alt/home/dvander/mozilla/ionmonkey/js/src/vm/Stack.cpp:360
#3 0x000000000051c459 in js::Interpret (cx=0xe07930, entryFrame=0x7ffff6381030, interpMode=js::JSINTERP_NORMAL) at /alt/home/dvander/mozilla/ionmonkey/js/src/jsinterp.cpp:1629
Where thisv is JSVAL_VOID
Whiteboard: [ion:p2:fx18]
|
||
Comment 3•12 years ago
|
||
Reproduces with --no-ion.
|
Assignee | |
Updated•12 years ago
|
QA Contact: terrence
|
|
Assignee | |
Comment 4•12 years ago
|
||
Fixes the OOM crash for me.
|
|
Assignee | |
Updated•12 years ago
|
QA Contact: terrence
|
||
Comment 5•12 years ago
|
||
Comment on attachment 662705 [details] [diff] [review]
v0: fix
Looks good.
Attachment #662705 -
Flags: review?(jcoppeard) → review+
|
|
Assignee | |
Comment 6•12 years ago
|
||
|
||
Comment 7•12 years ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla18
You need to log in
before you can comment on or make changes to this bug.
Description
•