Closed
Bug 724444
(IonFuzz)
Opened 13 years ago
Closed 6 years ago
[meta] IonMonkey fuzz bugs
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
People
(Reporter: dvander, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: meta)
We're ready for fuzzing! (I hope.)
To run IonMonkey, you need --ion -n. Running --ion without -n isn't supported.
Other interesting flags:
--ion-eager: Compile eagerly, like -a. This is somewhat buggy right now.
--ion-gvn=off: Disables folding/code elimination.
--ion-licm=off: Disables loop hoisting.
--ion-inlining=off: Disables function inlining.
-m: Still enables the method JIT,
There are other --ion flags but they are experimental and not ready for testing. Also note, -a has no effect on --ion and -d will disable ion.
Reporter | ||
Comment 1•13 years ago
|
||
Err, and the tree is http://hg.mozilla.org/projects/ionmonkey
Reporter | ||
Updated•13 years ago
|
Alias: IonFuzz
Depends on: 774859
Assignee | ||
Updated•10 years ago
|
Assignee: general → nobody
IonMonkey has landed for a few years, all dependent bugs have been resolved and this meta bug has not been used since 5 years ago. We currently likely have other ways to track bugs, in other words, if a meta bug is so desired again in the future, a new one should be opened.
-> FIXED
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•