Comment #3 on issue 1860 by [email protected]: ARM/MIPS:
mjsunit/regress/regress-1122.js often fails on 3.7 branch
http://code.google.com/p/v8/issues/detail?id=1860
Running d8 with "--gc_interval 10" makes crashes more frequent.
r10160 reverts r10092. So r10092 either fixes or masks a bug introduced in
earlier revisions. I bisected before r10092, and it seems that r10084 is
the culprit.
Stacktrace after the crash:
#0 0x08240fe6 in v8::internal::NormalizedMapCache::Clear() ()
#1 0x081a08d6 in v8::internal::Heap::MarkCompactPrologue() ()
#2 0x55108111 in ?? ()
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev