Closed Bug 1313655 Opened 8 years ago Closed 4 years ago

IonMonkey: Fallback after inlining failures caused by preliminary group objects.

Categories

(Core :: JavaScript Engine: JIT, defect, P3)

Product:
Core
Component:
JavaScript Engine: JIT
Type:
defect

Tracking

()

Status:
RESOLVED INVALID

People

(Reporter: nbp, Unassigned)

References

(Blocks 1 open bug)

Details

Bug 1303399 added infrastructure for handling fallback on inlining failure caused by newly disabled scripts. We should do the same for preliminary groups, as the alternative is to wait for another compilation cycle after we complete the preliminary group analysis. #0 0x00007fb4f6ac8d05 in js::jit::MIRGenerator::addAbortedPreliminaryGroup […] #3 0x00007fb4f6a2ee02 in js::jit::IonBuilder::shouldAbortOnPreliminaryGroups #4 0x00007fb4f6a395db in js::jit::IonBuilder::jsop_length_fastPath […] #8 0x00007fb4f6a135f9 in js::jit::IonBuilder::buildInline […] #15 0x00007fb4f6a135f9 in js::jit::IonBuilder::buildInline […] #22 0x00007fb4f6a135f9 in js::jit::IonBuilder::buildInline […] #29 0x00007fb4f6a135f9 in js::jit::IonBuilder::buildInline […] #37 0x00007fb4f6a0f231 in js::jit::IonBuilder::build […] #41 0x00007fb4f6a0a0c2 in js::jit::IonCompileScriptForBaseline
Depends on: 1286505
Blocks: 1245279

No longer valid with Warp. (Preliminary group objects no longer exist.)

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.