Commit e972ff7
deps: V8: backport bbd800c6e359
Original commit message:
[heap] Fix incorrect from space committed size
NewSpace page operations like RemovePage, PrependPage, and
EnsureCurrentCapacity should account for committed page size.
This may happen when a page was promoted from the new space to
old space on mark-compact.
Also, add DCHECKs on Commit and Uncommit to ensure the final
committed page size is the same as the current state.
Bug: v8:12657
Change-Id: I7aebc1fd3f51f177ae2ef6420f757f0c573e126b
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3504766
Reviewed-by: Dominik Inführ <dinfuehr@chromium.org>
Commit-Queue: Chengzhong Wu <legendecas@gmail.com>
Cr-Commit-Position: refs/heads/main@{#79426}
Refs: v8/v8@bbd800c
PR-URL: #44947
Refs: v8/v8@b953542
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>1 parent af9d821 commit e972ff7Copy full SHA for e972ff7
File tree
Expand file treeCollapse file tree
3 files changed
+28
-2
lines changedOpen diff view settings
Filter options
- deps/v8
- src/heap
- test/mjsunit/regress
Expand file treeCollapse file tree
3 files changed
+28
-2
lines changedOpen diff view settings
Collapse file
+1-1Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| ||
37 | 37 | |
38 | 38 | |
39 | 39 | |
40 | | - |
| 40 | + |
41 | 41 | |
42 | 42 | |
43 | 43 | |
|
Collapse file
deps/v8/src/heap/new-spaces.cc
Copy file name to clipboardExpand all lines: deps/v8/src/heap/new-spaces.cc+16-1Lines changed: 16 additions & 1 deletion
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| ||
54 | 54 | |
55 | 55 | |
56 | 56 | |
| 57 | + |
57 | 58 | |
58 | 59 | |
59 | 60 | |
| ||
74 | 75 | |
75 | 76 | |
76 | 77 | |
| 78 | + |
77 | 79 | |
78 | 80 | |
79 | 81 | |
| ||
106 | 108 | |
107 | 109 | |
108 | 110 | |
| 111 | + |
109 | 112 | |
110 | 113 | |
111 | 114 | |
| ||
134 | 137 | |
135 | 138 | |
136 | 139 | |
| 140 | + |
137 | 141 | |
| 142 | + |
138 | 143 | |
139 | 144 | |
140 | 145 | |
141 | 146 | |
142 | 147 | |
143 | 148 | |
144 | | - |
| 149 | + |
| 150 | + |
| 151 | + |
| 152 | + |
145 | 153 | |
146 | 154 | |
147 | 155 | |
| ||
246 | 254 | |
247 | 255 | |
248 | 256 | |
| 257 | + |
249 | 258 | |
250 | 259 | |
251 | 260 | |
| ||
258 | 267 | |
259 | 268 | |
260 | 269 | |
| 270 | + |
261 | 271 | |
262 | 272 | |
263 | 273 | |
| ||
319 | 329 | |
320 | 330 | |
321 | 331 | |
| 332 | + |
322 | 333 | |
323 | 334 | |
324 | 335 | |
| ||
344 | 355 | |
345 | 356 | |
346 | 357 | |
| 358 | + |
| 359 | + |
347 | 360 | |
| 361 | + |
| 362 | + |
348 | 363 | |
349 | 364 | |
350 | 365 | |
|
Collapse file
deps/v8/test/mjsunit/regress/regress-12657.js
Copy file name to clipboard+11Lines changed: 11 additions & 0 deletions
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| ||
| 1 | + |
| 2 | + |
| 3 | + |
| 4 | + |
| 5 | + |
| 6 | + |
| 7 | + |
| 8 | + |
| 9 | + |
| 10 | + |
| 11 | + |
0 commit comments