Status: Assigned
Owner: [email protected]
CC: [email protected]
Labels: Type-Bug Priority-Medium

New issue 4381 by [email protected]: for-in-opt fails in gc stress
https://code.google.com/p/v8/issues/detail?id=4381

git checkout eb8c092822c7745b49d3d97ec93edc2b0af72827

GYP_GENERATORS=ninja GYP_DEFINES="v8_enable_disassembler=1 v8_object_print=1 release_extra_cflags='-ggdb3' use_goma=1 clang=1 target_arch=ia32 v8_target_arch=ia32 v8_enable_slow_dchecks=1 dcheck_always_on=1 v8_enable_handle_zapping=1" gclient sync

n8 -c out/Debug d8 -j1000

out/ia32/Debug/d8 --test --random-seed=-2125750218 --stress-opt --always-opt --nohard-abort --nodead-code-elimination --nofold-constants --enable-slow-asserts --debug-code --verify-heap --harmony-proxies --allow-natives-syntax test/mjsunit/mjsunit.js test/mjsunit/for-in-opt.js --gc-interval=500

============ Stress 1/2 ============
============ Stress 2/2 ============
test/mjsunit/mjsunit.js:178: Failure: expected <["a","b","c","d"]> found <["a","a","b","c","d"]>
    throw new MjsUnitAssertionError(message);
    ^
Error
    at new MjsUnitAssertionError (test/mjsunit/mjsunit.js:31:16)
    at fail (test/mjsunit/mjsunit.js:178:11)
    at assertEquals (test/mjsunit/mjsunit.js:248:7)
    at check_f2 (test/mjsunit/for-in-opt.js:62:3)
    at test/mjsunit/for-in-opt.js:67:1


Presumably the commit eb8c092822c7745b49d3d97ec93edc2b0af72827 changed the heap layout that caused GC to trigger at a different timing.

What seems to happen is that the proxy handler for getPropertyDescriptor is called a second time after deopt. The bailout point is probably wrong.

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to