Closed Bug 929065 Opened 6 years ago Closed 6 years ago

OOM crash in jit-tests/tests/gc/bug-914614.js with --ion-parallel-compile=on --ion-eager

Categories

(Core :: JavaScript Engine: JIT, defect)

defect
Not set

Tracking

()

RESOLVED FIXED
mozilla27

People

(Reporter: terrence, Assigned: terrence)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

Currently crashing on tip. Configured with: CC="gcc" CXX="g++" CCACHE_CPP2="1" CCACHE_UNIFY="1" ./configure --enable-optimize --enable-debug --enable-signmar --enable-stdcxx-compat --enable-ctypes --enable-trace-malloc --with-ccache=/usr/bin/ccache --disable-shared-js --with-system-nspr --without-intl-api

Ran with: ./jit-test/jit_test.py ./ctx/js --tbpl --args="--ion-parallel-compile=on"

The attached patch fixes the crash in normal runs. Valgrind, however, still insists there are several invalid write and then triggers AssertThreadCanAccessRuntime several hundred times before crashing somehow. I'm not sure what's going on here: presumably a race. Brian, could you take a look at this?
Attachment #819870 - Flags: review?(bhackett1024)
Attachment #819870 - Flags: review?(bhackett1024) → review+
Blocks: 929221
Duplicate of this bug: 928914
https://hg.mozilla.org/mozilla-central/rev/0bd2b4b3f715
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla27
You need to log in before you can comment on or make changes to this bug.