Comment #4 on issue 3679 by [email protected]: d8 crashes with
--trace_dead_code_elimination flag
https://code.google.com/p/v8/issues/detail?id=3679
Since this was closed I didn't look at it till now. But I thought I would
add that even with --no-concurrent-recompilation that v8 still crashes:
-------------------
v8/benchmarks$../out/x64.debug/d8 --enable_slow_asserts
--trace_dead_code_elimination --no-concurrent-recompilation run.js
[MarkLive root -> BlockEntry type:Tagged]
[MarkLive root -> Simulate id=5 type:Tagged]
[MarkLive root -> Goto B1 type:Tagged]
[MarkLive root -> BlockEntry type:Tagged]
[MarkLive root -> Parameter 0 type:Tagged]
[MarkLive root -> Parameter 1 type:Tagged]
[MarkLive root -> Parameter 2 type:Tagged]
[MarkLive root -> Parameter 3 type:Tagged]
[MarkLive root -> Simulate id=5 var[4] = t10, var[3] = t7, var[2] = t6,
var[1] = t5, var[0] = t4 type:Tagged]
[MarkLive Simulate id=5 var[4] = t10, var[3] = t7, var[2] = t6, var[1] =
t5, var[0] = t4 type:Tagged -> Context type:Tagged]
[MarkLive root -> CompareObjectEqAndBranch t13 t12 goto (B6, B2)
type:Tagged]
[MarkLive CompareObjectEqAndBranch t13 t12 goto (B6, B2) type:Tagged ->
LoadKeyed t4[t5] type:Tagged [noOSE]]
[MarkLive CompareObjectEqAndBranch t13 t12 goto (B6, B2) type:Tagged ->
Constant 0x2ba0c404121 <undefined> [map 0x30be013041f1] ]
[MarkLive root -> BlockEntry type:Tagged]
[MarkLive root -> CompareNumericAndBranch EQ i20 i21 goto (B4, B3)
type:Tagged]
[MarkLive CompareNumericAndBranch EQ i20 i21 goto (B4, B3) type:Tagged ->
LoadNamedField t19.[in-object]@8 type:Tagged [noOSE]]
[MarkLive CompareNumericAndBranch EQ i20 i21 goto (B4, B3) type:Tagged ->
Constant 7 type:Smi [noOSE]]
[MarkLive LoadNamedField t19.[in-object]@8 type:Tagged [noOSE] ->
LoadNamedField t18.%map@0 type:Tagged [noOSE]]
[MarkLive LoadNamedField t18.%map@0 type:Tagged [noOSE] -> LoadNamedField
t13.[in-object]@8 type:Tagged [noOSE]]
[MarkLive root -> BlockEntry type:Tagged]
[MarkLive root -> Goto B7 type:Tagged]
[MarkLive root -> BlockEntry type:Tagged]
[MarkLive root -> Allocate i26 (N) changes[NewSpacePromotion] [noOSE]]
[MarkLive Allocate i26 (N) changes[NewSpacePromotion] [noOSE] -> Constant
72 type:Smi [noOSE]]
[MarkLive root -> StoreNamedField t27.%map@0 = t28 (write-barrier)
changes[Maps] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.%map@0 = t28 (write-barrier) changes[Maps]
type:Tagged [noOSE] -> LoadNamedField t18.%map@0 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.[in-object]@8 = t30 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.[in-object]@8 = t30 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE] -> LoadNamedField
t18.[in-object]@8 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.%elements@16 = t32 (write-barrier)
changes[ElementsPointer] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.%elements@16 = t32 (write-barrier)
changes[ElementsPointer] type:Tagged [noOSE] -> LoadNamedField
t18.%elements@16 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.[in-object]@24 = t34 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.[in-object]@24 = t34 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE] -> LoadNamedField
t18.[in-object]@24 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.[in-object]@32 = t36 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.[in-object]@32 = t36 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE] -> LoadNamedField
t18.[in-object]@32 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.[in-object]@40 = t38 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.[in-object]@40 = t38 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE] -> LoadNamedField
t18.[in-object]@40 type:Tagged [noOSE]]
[MarkLive root -> StoreNamedField t27.[in-object]@48 = t40 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE]]
[MarkLive StoreNamedField t27.[in-object]@48 = t40 (write-barrier)
changes[InobjectFields] type:Tagged [noOSE] -> LoadNamedField
t18.[in-object]@48 type:Tagged [noOSE]]
[MarkLive root -> InnerAllocatedObject t27 offset Constant 56 type:Smi
[noOSE] [noOSE]]
[MarkLive InnerAllocatedObject t27 offset Constant 56 type:Smi [noOSE]
[noOSE] -> Constant 56 type:Smi [noOSE]]
[MarkLive root -> StoreNamedField t43.%map@0 = t44 (write-barrier)
changes[Maps] type:Tagged [noOSE]]
[MarkLive StoreNamedField t43.%map@0 = t44 (write-barrier) changes[Maps]
type:Tagged [noOSE] -> Constant 0x30be01305af1 <Map(elements=3)>
[stable-map]
#
# Fatal error in .././src/handles-inl.h, line 43
# CHECK(!v8::internal::FLAG_enable_slow_asserts ||
(IsDereferenceAllowed(INCLUDE_DEFERRED_CHECK))) failed
#
==== C stack trace ===============================
1: V8_Fatal
2: v8::internal::Handle<v8::internal::Map>::operator*() const
3: v8::internal::HConstant::PrintDataTo(std::ostream&) const
4: v8::internal::HInstruction::PrintTo(std::ostream&) const
5: v8::internal::operator<<(std::ostream&, v8::internal::HValue const&)
6:
v8::internal::HDeadCodeEliminationPhase::PrintLive(v8::internal::HValue*,
v8::internal::HValue*)
7:
v8::internal::HDeadCodeEliminationPhase::MarkLive(v8::internal::HValue*,
v8::internal::ZoneList<v8::internal::HValue*>*)
8: v8::internal::HDeadCodeEliminationPhase::MarkLiveInstructions()
9: v8::internal::HDeadCodeEliminationPhase::Run()
10: void
v8::internal::HGraph::Run<v8::internal::HDeadCodeEliminationPhase>()
11: v8::internal::HGraph::Optimize(v8::internal::BailoutReason*)
12: ??
13: ??
14: v8::internal::FastCloneShallowObjectStub::GenerateCode()
15: v8::internal::CodeStub::GetCode()
16: v8::internal::MacroAssembler::CallStub(v8::internal::CodeStub*,
v8::internal::TypeFeedbackId)
17:
v8::internal::FullCodeGenerator::VisitObjectLiteral(v8::internal::ObjectLiteral*)
18: v8::internal::ObjectLiteral::Accept(v8::internal::AstVisitor*)
19: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
20:
v8::internal::FullCodeGenerator::VisitForAccumulatorValue(v8::internal::Expression*)
21:
v8::internal::FullCodeGenerator::VisitAssignment(v8::internal::Assignment*)
22: v8::internal::Assignment::Accept(v8::internal::AstVisitor*)
23: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
24:
v8::internal::FullCodeGenerator::VisitForEffect(v8::internal::Expression*)
25:
v8::internal::FullCodeGenerator::VisitExpressionStatement(v8::internal::ExpressionStatement*)
26: v8::internal::ExpressionStatement::Accept(v8::internal::AstVisitor*)
27: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
28:
v8::internal::AstVisitor::VisitStatements(v8::internal::ZoneList<v8::internal::Statement*>*)
29: v8::internal::FullCodeGenerator::VisitBlock(v8::internal::Block*)
30: v8::internal::Block::Accept(v8::internal::AstVisitor*)
31: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
32:
v8::internal::FullCodeGenerator::VisitIfStatement(v8::internal::IfStatement*)
33: v8::internal::IfStatement::Accept(v8::internal::AstVisitor*)
34: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
35:
v8::internal::AstVisitor::VisitStatements(v8::internal::ZoneList<v8::internal::Statement*>*)
36:
v8::internal::FullCodeGenerator::VisitSwitchStatement(v8::internal::SwitchStatement*)
37: v8::internal::SwitchStatement::Accept(v8::internal::AstVisitor*)
38: v8::internal::FullCodeGenerator::Visit(v8::internal::AstNode*)
39:
v8::internal::AstVisitor::VisitStatements(v8::internal::ZoneList<v8::internal::Statement*>*)
40: v8::internal::FullCodeGenerator::Generate()
41:
v8::internal::FullCodeGenerator::MakeCode(v8::internal::CompilationInfo*)
42: ??
43: ??
44:
v8::internal::Compiler::GetLazyCode(v8::internal::Handle<v8::internal::JSFunction>)
45: ??
46: v8::internal::Runtime_CompileLazy(int, v8::internal::Object**,
v8::internal::Isolate*)
47: ??
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
