DescriptionFix a race between concurrent recompilation and OSR.
If concurrent recompilation finishes before OSR, then OSR replaces
the old optimized code without evicting it from the optimized code map.
New functions can get the old optimized code from the optimized code map,
but the old code could be already deoptimized.
BUG=330046
TEST=test/mjsunit/regress-330046.js
LOG=Y
R=yangguo@chromium.org
Committed: https://code.google.com/p/v8/source/detail?r=18420
Patch Set 1 #
Messages
Total messages: 3 (0 generated)
|