https://codereview.chromium.org/228643002/diff/1/src/arm/codegen-arm.cc
File src/arm/codegen-arm.cc (right):
https://codereview.chromium.org/228643002/diff/1/src/arm/codegen-arm.cc#newcode610
src/arm/codegen-arm.cc:610: __ mov(r0, Operand(Smi::FromInt(0)));
In allocation folding, we store the one_pointer_filler_map to
uninitialized memory when we verify the heap. Either do that to stay in
sync with allocation folding implementation or install a free_space_map
with the given size. I actually would prefer option B. Then you do not
have to loop over the array.
https://codereview.chromium.org/228643002/diff/1/test/mjsunit/regress/regress-transition-elements-heap-verification.js
File
test/mjsunit/regress/regress-transition-elements-heap-verification.js
(right):
https://codereview.chromium.org/228643002/diff/1/test/mjsunit/regress/regress-transition-elements-heap-verification.js#newcode7
test/mjsunit/regress/regress-transition-elements-heap-verification.js:7:
%SetAllocationTimeout(1000000, 1000000);
The test looks super fragile, but there is probably nothing we can do
here.
https://codereview.chromium.org/228643002/
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
