Comment #2 on issue 2987 by [email protected]: branches/3.22: wrong
behavior for Dart-compiled DeltaBlue variant
http://code.google.com/p/v8/issues/detail?id=2987
Started investigating this. The deoptimizer materialized an object with a
tracked "null" literal in one of the fields. Looking at the HGraph reveals
that one of the HCapturedObject values containing a phi in that field is
removed by the second dead code elimination pass. I will try to figure out
why that happens. This is the faulty deopt with the "null" literal in field
#6 ...
[deoptimizing (DEOPT eager): begin 0x5a024481 Plan.execute$0 @16, FP to SP
delta: 52]
translating Plan.execute$0 => node=54, height=4
0xffffc884: [top + 20] <- 0x5a06e4f1 ; [sp + 60] 0x5a06e4f1 <a Plan
with map 0x57f14471>
0xffffc880: [top + 16] <- 0x4d76d520 ; caller's pc
0xffffc87c: [top + 12] <- 0xffffc89c ; caller's fp
0xffffc878: [top + 8] <- 0x5a01fe79; context
0xffffc874: [top + 4] <- 0x5a024481; function
0xffffc870: [top + 0] <- 0x421080f1 <Odd Oddball> ; object (length = 7,
is_args = 0)
object @0xffffc870: [field #0] <- 0x57f142e1 <Map(elements=3)> ;
literal
object @0xffffc870: [field #1] <- 0x42f080a1 ; [sp + 32] 0x42f080a1
<FixedArray[0]>
object @0xffffc870: [field #2] <- 0x42f080a1 <FixedArray[0]> ; literal
object @0xffffc870: [field #3] <- 0x5a06e4d9 ; esi 0x5a06e4d9 <JS
Array[2]>
object @0xffffc870: [field #4] <- 0x00000004 ; [sp + 20] 2
object @0xffffc870: [field #5] <- 0x00000002 ; edx 1
object @0xffffc870: [field #6] <- 0x42108081 <null> ; literal
[deoptimizing (eager): end 0x5a024481 Plan.execute$0 @16 => node=54,
pc=0x4d767930, state=NO_REGISTERS, alignment=no padding, took 0.213 ms]
[deoptimize marked code in all contexts]
[deoptimizer unlinked: Plan.execute$0 / 5a024481]
[deoptimizer unlinked: ListIterator / 5a042c7d]
Materialized captured object of size 28 for 0xffffc870: 0x5a06e78d <a
ListIterator with map 0x57f14719>
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
