Status: New
Owner: ----
Labels: Type-Bug Priority-Medium HW-ARM
New issue 4205 by [email protected]: mjsunit/regress/regress-2249
crashes flakily on arm64 nosnap debug
https://code.google.com/p/v8/issues/detail?id=4205
This doesn't always crash, but when it does, it crashes reliably with the
same revision, e.g.:
http://build.chromium.org/p/client.v8/builders/V8%20Linux%20-%20arm64%20-%20sim%20-%20nosnap%20-%20debug%20-%202/builds/2795
Reliable repro:
git checkout 94a0bc8e90830dd474d9a7405c2db66cfde30df9
gclient sync --nohooks
GYP_GENERATORS=ninja GYP_DEFINES="target_arch=x64 v8_target_arch=arm64
use_goma=1 v8_enable_slow_dchecks=1 v8_optimized_debug=1
v8_use_snapshot=false" gclient runhooks
ninja -j1000 -C out/Debug d8
out/Debug/d8 --test --random-seed=772440149 --turbo --always-opt
--nohard-abort --nodead-code-elimination --nofold-constants
--enable-slow-asserts --debug-code --verify-heap --gc-interval=10
--stress-compaction test/mjsunit/mjsunit.js
test/mjsunit/regress/regress-2249.js
#
# Fatal error in ../../src/objects-inl.h, line 2970
# Check failed: !v8::internal::FLAG_enable_slow_asserts ||
(object->IsFixedArrayBase()).
#
==== C stack trace ===============================
1: 0xe2f833
2: 0x93d621
3: 0x941bfc
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
