Closed
Bug 777186
Opened 13 years ago
Closed 13 years ago
IonMonkey: OOM Testing: Crash [@ js::ion::MBasicBlock::entryResumePoint]
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla18
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: crash, testcase, Whiteboard: [ion:p2])
Crash Data
Attachments
(1 file)
|
5.83 KB,
patch
|
dvander
:
review+
|
Details | Diff | Splinter Review |
The following command crashes on ionmonkey revision b82fb4d04f60 (dbg build):
js -e 'const libdir = "js/src/jit-test/lib/";' -A 14914 -f js/src/jit-test/tests/v8-v5/check-richards.js
(In reply to Christian Holler (:decoder) from comment #0)
> The following command crashes on ionmonkey revision b82fb4d04f60 (dbg build):
>
> js -e 'const libdir = "js/src/jit-test/lib/";' -A 14914 -f
> js/src/jit-test/tests/v8-v5/check-richards.js
I can't reproduce this on the given cset. Could you show the backtrace?
NULL check is missing on line 2945 (bottom = newBlock) of IonBuilder.cpp.
Whiteboard: [ion:p2]
|
||
Comment 3•13 years ago
|
||
Attachment #662376 -
Flags: review?(dvander)
|
||
Updated•13 years ago
|
Attachment #662376 -
Flags: review?(dvander) → review+
|
|
||
Comment 4•13 years ago
|
||
|
||
Comment 5•13 years ago
|
||
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla18
You need to log in
before you can comment on or make changes to this bug.
Description
•