[webkit-help] [squirrelfish-dev] JIT Optimize Property Access failed
Hi I enable ENABLE_JIT_OPTIMIZE_PROPERTY_ACCESS feature and find that it will crash when go back the home page after run follow test case, I think it is caused by the optimize propery access, so anyone know that it is caused by the arch related code or jit Infrastructure code? and if i disable ENABLE_JIT_OPTIMIZE_PROPERTY_ACCESS feature, it will run correctly. Any help explaining this would be much appreciated! test case: var Origin = new Object(); function Init() { Origin.V = [150] } for ( var i = 20; i <= 160; i *= 2 ) { //Init(i); } Init(); Init(); Init(); Origin = null; Callstack: JAVASCRIPTCORE!const JSC::JSArray::`vftable' + 2 bytes JAVASCRIPTCORE!JSC::Heap::sweep() line 1104 + 14 bytes JAVASCRIPTCORE!JSC::Heap::collectAllGarbage() line 1306 WEBKIT!WebCore::collect(void * 0x00000000) line 47 WEBKIT!WebCore::GCController::gcTimerFired(WebCore::Timer<WebCore::GCController> * 0x06a905a0 {m_object=??? m_function=??? }) line 70 WEBKIT!WebCore::Timer<WebCore::PageCache>::fired() line 98 + 20 bytes WEBKIT!WebCore::ThreadTimers::sharedTimerFiredInternal() line 115 WEBKIT!WebCore::ThreadTimers::sharedTimerFired() line 91 -- BGs/Felix Shi -- BGs/Felix Shi
Hi I know the cti_op_del_by_val was called by the binary code, but I don't know what condition will result call for cti_op_del_by_val, anybody can help explain it? Thanks BGs/Felix Shi
Hi All, apologies for the spam. right now I am trying to fix the jit crash bug, but I don't know how to start it, can anyone give me some suggestion? when javascript engine run some special test case, it will run crash. I have print all the emited instructions, but the instructions will be repatch or relink after it run, so is exist an way or steps for debugging it? Thanks in advance! -- BGs/Felix Shi
On Mar 4, 2013, at 2:41 AM, talking1239@gmail.com wrote:
Hi All, apologies for the spam.
Please, it’s not acceptable to cross-post to all three of lists to ask for help debugging a problem. If we all did that we’d have tons of traffic on these mailing lists. Stop! Please at least narrow this down to just the webkit-help list, or better please use a bug report for this discussion instead. -- Darin
participants (2)
-
Darin Adler
-
talking1239@gmail.com