854254 - BaselineCompiler: Crash at 0xcdcdcdcd with EnterBaseline on the stack

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

The upcoming partially reduced testcase crashes js debug shell on ionmonkey changeset e5978106c61a with --baseline-eager --no-ion at 0xcdcdcdcd with EnterBaseline on the stack.

Comment 3

[Jan de Mooij [:jandem]]

I can't reproduce this crash (Linux 32-bit debug, revision in comment 1), but I'm pretty sure this is a duplicate of bug 854052.

Gary do you still see this on tip? Can you check if the patch in bug 854052 fixes this for you?

Comment 4

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

(In reply to Jan de Mooij [:jandem] from comment #3)
> I can't reproduce this crash (Linux 32-bit debug, revision in comment 1),
> but I'm pretty sure this is a duplicate of bug 854052.
> 
> Gary do you still see this on tip? Can you check if the patch in bug 854052
> fixes this for you?

I can't reproduce on the original changeset nor tip either, so I guess it's safe to assume it's similar. This bug used to pop up occasionally, so probably we'll spot it again when it comes up.

Assuming FIXED by bug 854052.

Comment 5

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Also, no need to land the unreduced testcase.

Comment 6

[u279076]

Tagging [qa-] due to this bugs unreproducibility. Please drop [qa-] and add the verifyme keyword if there QA testing needed here.