929065 - OOM crash in jit-tests/tests/gc/bug-914614.js with --ion-parallel-compile=on --ion-eager

Status: RESOLVED FIXED

(Core :: JavaScript Engine: JIT, defect)

Description

[Terrence Cole [:terrence]]

Attachment: oom_crash-v0.diff

Currently crashing on tip. Configured with: CC="gcc" CXX="g++" CCACHE_CPP2="1" CCACHE_UNIFY="1" ./configure --enable-optimize --enable-debug --enable-signmar --enable-stdcxx-compat --enable-ctypes --enable-trace-malloc --with-ccache=/usr/bin/ccache --disable-shared-js --with-system-nspr --without-intl-api

Ran with: ./jit-test/jit_test.py ./ctx/js --tbpl --args="--ion-parallel-compile=on"

The attached patch fixes the crash in normal runs. Valgrind, however, still insists there are several invalid write and then triggers AssertThreadCanAccessRuntime several hundred times before crashing somehow. I'm not sure what's going on here: presumably a race. Brian, could you take a look at this?

Comment 1

[Terrence Cole [:terrence]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/0bd2b4b3f715

Comment 3

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/0bd2b4b3f715