IonMonkey: OOM Testing: Assertion failure: ion::IsEnabled(cx), at js/src/ion/Ion.cpp:840

RESOLVED FIXED in mozilla18

Status

()

Core
JavaScript Engine
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: decoder, Assigned: terrence)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Other Branch
mozilla18
x86_64
Linux
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [ion:p2:fx18])

Attachments

(1 attachment)

(Reporter)

Description

6 years ago
The following command asserts on ionmonkey revision 8c54899dae82 (dbg build):

js  -e 'const libdir = "js/src/jit-test/lib/";' -A 6266 -f js/src/jit-test/tests/pic/grandproto.js
(Reporter)

Comment 1

6 years ago
Still valid with ballast patch, same parameters.
I get a failure here but it's slightly different. Stack:


#0  0x00000000004046d4 in JS::Value::toObject (this=0x7ffff63810b0) at ../../jsapi.h:474
#1  0x000000000069b175 in js::StackFrame::constructorThis (this=0x7ffff63810b8) at ../vm/Stack.h:713
#2  0x000000000069cb16 in js::StackFrame::epilogue (this=0x7ffff63810b8, cx=0xe07930) at /alt/home/dvander/mozilla/ionmonkey/js/src/vm/Stack.cpp:360
#3  0x000000000051c459 in js::Interpret (cx=0xe07930, entryFrame=0x7ffff6381030, interpMode=js::JSINTERP_NORMAL) at /alt/home/dvander/mozilla/ionmonkey/js/src/jsinterp.cpp:1629

Where thisv is JSVAL_VOID
Whiteboard: [ion:p2:fx18]
Reproduces with --no-ion.
(Assignee)

Updated

6 years ago
QA Contact: terrence
(Assignee)

Comment 4

6 years ago
Created attachment 662705 [details] [diff] [review]
v0: fix

Fixes the OOM crash for me.
Assignee: general → terrence
Status: NEW → ASSIGNED
Attachment #662705 - Flags: review?(jcoppeard)
(Assignee)

Updated

6 years ago
QA Contact: terrence
Comment on attachment 662705 [details] [diff] [review]
v0: fix

Looks good.
Attachment #662705 - Flags: review?(jcoppeard) → review+
https://hg.mozilla.org/mozilla-central/rev/ae0ea12a8109
Status: ASSIGNED → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla18
You need to log in before you can comment on or make changes to this bug.