Comment #1 on issue 979 by [email protected]: Failure in mozilla test
js1_3/inherit/proto_11.js
http://code.google.com/p/v8/issues/detail?id=979
The test proto_11.js reduces to a simpler test case. I have attached the
modified (reduced) proto_11.js. It fails with --stress-opt in release mode
on linux ia32 snapshot build. It needs to be called with all the other
scripts that are involved in the test - my command line is:
/home/whesse/trunk/v8-1/bild32/shell --trace-deopt --trace-inlining
--trace-bailout --stress-opt --expose-gc
/home/whesse/trunk/v8-1/test/mozilla/mozilla-shell-emulation.js
/home/whesse/trunk/v8-1/test/mozilla/data/shell.js
/home/whesse/trunk/v8-1/test/mozilla/data/js1_3/shell.js
/home/whesse/trunk/v8-1/test/mozilla/data/js1_3/inherit/shell.js
/home/whesse/trunk/v8-1/test/mozilla/data/js1_3/inherit/proto_11.js
The problem may be in a polymorphic global store after a postincrement at
the end of one function, followed by a logical or in the calling function.
The global store seems to fail, writing undefined, in the failing case.
This seems to be at the end of the Employee function.
This looks similar to bug 977, so I am attaching a mention of it to that
bug.
Attachments:
proto_11.js 3.3 KB
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
