Updates:
Status: Fixed
Comment #3 on issue 1014 by [email protected]: CHECK(fixed_size +
height_in_bytes == input_frame_size) failing intermittently
http://code.google.com/p/v8/issues/detail?id=1014
There was an incorrect environment recorded for polymorphic calls and loads
occurring in an effect context. The environment had the value of the call
or load on top of its expression stack, but this value is not actually
present in the unoptimized code.
The issue affected any deoptimization to one of these points. Normally
extra expression stack elements when we expect none in the unoptimized code
goes undetected, but it was caught by the assert if we later did OSR after
deoptimization of the same frame.
Fixed in SVN bleeding_edge revision 6189, and the issue is not reproducible
in Chromium patched with that fix.
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev