Status: New
Owner: ----
Labels: Type-Bug Priority-Medium HW-IA32
New issue 2795 by [email protected]: Check fails with deopt for
mjsunit/array-store-and-grow
http://code.google.com/p/v8/issues/detail?id=2795
Check fails when using deopt-every-n-times flag. Tested with revision
15821. Please analyze if the test case makes sense to be used with the
deopt-every-n-times flag.
Command line:
out/ia32.debug/d8 --test --deopt-every-n-times 2004567 --nobreak-on-abort
--nodead-code-elimination --nofold-constants --enable-slow-asserts
--debug-code --verify-heap --noparallel-recompilation
test/mjsunit/mjsunit.js test/mjsunit/array-store-and-grow.js
Output (shortened):
#
# Fatal error in ../src/objects-inl.h, line 2555
# CHECK(object->IsSmi()) failed
#
==== C stack trace ===============================
1: v8::internal::OS::DumpBacktrace()
2: V8_Fatal
3: v8::internal::Smi::cast(v8::internal::Object*)
4: v8::internal::FixedDoubleArray::FixedDoubleArrayVerify()
5: v8::internal::HeapObject::HeapObjectVerify()
6: v8::internal::MaybeObject::Verify()
7: v8::internal::NewSpace::Verify()
8: v8::internal::Heap::Verify()
9: v8::internal::Heap::GarbageCollectionPrologue()
10: v8::internal::Heap::CollectGarbage(v8::internal::AllocationSpace,
v8::internal::GarbageCollector, char const*, char const*)
11: v8::internal::Runtime::PerformGC(v8::internal::Object*)
12: ??
13: ??
14: ??
15: ??
16: ??
17: ??
==== JS stack trace =========================================
[...]
Aborted (core dumped)
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
