IonMonkey: OOM Testing: Crash [@ js::ion::MBasicBlock::stackDepth]

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: decoder, Assigned: jandem)

Tracking

(Blocks: 1 bug, {crash, testcase})

Other Branch
x86_64
Linux
crash, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(crash signature)

Attachments

(1 attachment)

(Reporter)

Description

5 years ago
The following command crashes on ionmonkey revision 88ea2e529609 (dbg build):

js  -e 'const libdir = "js/src/jit-test/lib/";' -A 8461 -f js/src/jit-test/tests/debug/Object-parameterNames.js
(Assignee)

Comment 1

5 years ago
Created attachment 625957 [details] [diff] [review]
Patch

Propagate OOm from newBlock.
Assignee: general → jdemooij
Status: NEW → ASSIGNED
Attachment #625957 - Flags: review?(dvander)
(Assignee)

Updated

5 years ago
Duplicate of this bug: 756773
Attachment #625957 - Flags: review?(dvander) → review+
(Assignee)

Comment 3

5 years ago
https://hg.mozilla.org/projects/ionmonkey/rev/7d30fd2305e5
Status: ASSIGNED → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.