Status: Accepted
Owner: [email protected]
CC: [email protected],  [email protected]
Labels: Type-Bug Priority-Medium

New issue 3027 by [email protected]: The n-arguments Array constructor might exceed allocation limit
http://code.google.com/p/v8/issues/detail?id=3027

One repro is worth a thousand words. Running the following on x64 will lead to an "illegal access" be thrown by Runtime_AllocateInTargetSpace because the size exceeds the allocation limit.

function boom() {
  var args = [];
  for (var i = 0; i < 120000; i++) {
    args.push(i);
  }
  var a = Array.apply(Array, args);
  return a;
}

boom();
boom();
%OptimizeFunctionOnNextCall(boom);
boom();

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to