| Index: test/cctest/heap/test-compaction.cc
|
| diff --git a/test/cctest/heap/test-compaction.cc b/test/cctest/heap/test-compaction.cc
|
| deleted file mode 100644
|
| index fec5ecc40b2c548ecec13c176b8fa2845ef05fc4..0000000000000000000000000000000000000000
|
| --- a/test/cctest/heap/test-compaction.cc
|
| +++ /dev/null
|
| @@ -1,344 +0,0 @@
|
| -// Copyright 2015 the V8 project authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include "test/cctest/cctest.h"
|
| -#include "test/cctest/heap/heap-tester.h"
|
| -#include "test/cctest/heap/utils-inl.h"
|
| -
|
| -namespace v8 {
|
| -namespace internal {
|
| -
|
| -static std::vector<Handle<FixedArray>> FillUpFirstOldSpacePage(Heap* heap) {
|
| - // This functions assumes that old space top is still on the first page
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - int free_on_first_page = static_cast<int>(heap->old_space()->Available());
|
| - return CreatePadding(heap, free_on_first_page, TENURED);
|
| -}
|
| -
|
| -
|
| -static void CheckInvariantsOfAbortedPage(Page* page) {
|
| - // Check invariants:
|
| - // 1) Markbits are cleared
|
| - // 2) The page is not marked as evacuation candidate anymore
|
| - // 3) The page is not marked as aborted compaction anymore.
|
| - CHECK(page->markbits()->IsClean());
|
| - CHECK(!page->IsEvacuationCandidate());
|
| - CHECK(!page->IsFlagSet(Page::COMPACTION_WAS_ABORTED));
|
| -}
|
| -
|
| -
|
| -HEAP_TEST(CompactionFullAbortedPage) {
|
| - // Test the scenario where we reach OOM during compaction and the whole page
|
| - // is aborted.
|
| -
|
| - FLAG_manual_evacuation_candidates_selection = true;
|
| - CcTest::InitializeVM();
|
| - Isolate* isolate = CcTest::i_isolate();
|
| - Heap* heap = isolate->heap();
|
| - // Disable concurrent sweeping to ensure memory is in an expected state, i.e.,
|
| - // we can reach the state of a half aborted page. We cannot just set
|
| - // {FLAG_concurrent_sweeping} because the flag is cached in heap, which is
|
| - // initialized earlier.
|
| - heap->concurrent_sweeping_enabled_ = false;
|
| - {
|
| - HandleScope scope1(isolate);
|
| - // Fill up the first page since it cannot be evacuated.
|
| - auto first_page_handles = FillUpFirstOldSpacePage(heap);
|
| -
|
| - {
|
| - HandleScope scope2(isolate);
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - auto second_page_handles =
|
| - CreatePadding(heap, Page::kAllocatableMemory, TENURED);
|
| - Page* to_be_aborted_page =
|
| - Page::FromAddress(second_page_handles.front()->address());
|
| - to_be_aborted_page->SetFlag(
|
| - MemoryChunk::FORCE_EVACUATION_CANDIDATE_FOR_TESTING);
|
| - heap->set_force_oom(true);
|
| - heap->CollectAllGarbage();
|
| -
|
| - // Check that all handles still point to the same page, i.e., compaction
|
| - // has been aborted on the page.
|
| - for (Handle<FixedArray> object : second_page_handles) {
|
| - CHECK_EQ(to_be_aborted_page, Page::FromAddress(object->address()));
|
| - }
|
| - CheckInvariantsOfAbortedPage(to_be_aborted_page);
|
| - }
|
| - }
|
| -}
|
| -
|
| -
|
| -HEAP_TEST(CompactionPartiallyAbortedPage) {
|
| - // Test the scenario where we reach OOM during compaction and parts of the
|
| - // page have already been migrated to a new one.
|
| -
|
| - FLAG_manual_evacuation_candidates_selection = true;
|
| -
|
| - const int object_size = 128 * KB;
|
| -
|
| - CcTest::InitializeVM();
|
| - Isolate* isolate = CcTest::i_isolate();
|
| - Heap* heap = isolate->heap();
|
| - // Disable concurrent sweeping to ensure memory is in an expected state, i.e.,
|
| - // we can reach the state of a half aborted page. We cannot just set
|
| - // {FLAG_concurrent_sweeping} because the flag is cached in heap, which is
|
| - // initialized earlier.
|
| - heap->concurrent_sweeping_enabled_ = false;
|
| - {
|
| - HandleScope scope1(isolate);
|
| - // Fill up the first page since it cannot be evacuated.
|
| - auto first_page_handles = FillUpFirstOldSpacePage(heap);
|
| -
|
| - {
|
| - HandleScope scope2(isolate);
|
| - // Fill the second page with objects of size {object_size} (last one is
|
| - // properly adjusted).
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - auto second_page_handles =
|
| - CreatePadding(heap, Page::kAllocatableMemory, TENURED, object_size);
|
| - // Mark the second page for evacuation.
|
| - Page* to_be_aborted_page =
|
| - Page::FromAddress(second_page_handles.front()->address());
|
| - to_be_aborted_page->SetFlag(
|
| - MemoryChunk::FORCE_EVACUATION_CANDIDATE_FOR_TESTING);
|
| -
|
| - {
|
| - // Add a third page that is filled with {num_objects} objects of size
|
| - // {object_size}.
|
| - HandleScope scope3(isolate);
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - const int num_objects = 3;
|
| - std::vector<Handle<FixedArray>> third_page_handles = CreatePadding(
|
| - heap, object_size * num_objects, TENURED, object_size);
|
| - Page* third_page =
|
| - Page::FromAddress(third_page_handles.front()->address());
|
| - heap->set_force_oom(true);
|
| - heap->CollectAllGarbage();
|
| -
|
| - bool migration_aborted = false;
|
| - for (Handle<FixedArray> object : second_page_handles) {
|
| - // Once compaction has been aborted, all following objects still have
|
| - // to be on the initial page.
|
| - CHECK(!migration_aborted ||
|
| - (Page::FromAddress(object->address()) == to_be_aborted_page));
|
| - if (Page::FromAddress(object->address()) == to_be_aborted_page) {
|
| - // This object has not been migrated.
|
| - migration_aborted = true;
|
| - } else {
|
| - CHECK_EQ(Page::FromAddress(object->address()), third_page);
|
| - }
|
| - }
|
| - // Check that we actually created a scenario with a partially aborted
|
| - // page.
|
| - CHECK(migration_aborted);
|
| - CheckInvariantsOfAbortedPage(to_be_aborted_page);
|
| - }
|
| - }
|
| - }
|
| -}
|
| -
|
| -
|
| -HEAP_TEST(CompactionPartiallyAbortedPageIntraAbortedPointers) {
|
| - // Test the scenario where we reach OOM during compaction and parts of the
|
| - // page have already been migrated to a new one. Objects on the aborted page
|
| - // are linked together. This test makes sure that intra-aborted page pointers
|
| - // get properly updated.
|
| -
|
| - FLAG_manual_evacuation_candidates_selection = true;
|
| -
|
| - const int object_size = 128 * KB;
|
| -
|
| - CcTest::InitializeVM();
|
| - Isolate* isolate = CcTest::i_isolate();
|
| - Heap* heap = isolate->heap();
|
| - // Disable concurrent sweeping to ensure memory is in an expected state, i.e.,
|
| - // we can reach the state of a half aborted page. We cannot just set
|
| - // {FLAG_concurrent_sweeping} because the flag is cached in heap, which is
|
| - // initialized earlier.
|
| - heap->concurrent_sweeping_enabled_ = false;
|
| - {
|
| - HandleScope scope1(isolate);
|
| - // Fill up the first page since it cannot be evacuated.
|
| - auto first_page_handles = FillUpFirstOldSpacePage(heap);
|
| -
|
| - Page* to_be_aborted_page = nullptr;
|
| - {
|
| - HandleScope temporary_scope(isolate);
|
| - // Fill the second page with objects of size {object_size} (last one is
|
| - // properly adjusted).
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - const int free_on_second_page = Page::kAllocatableMemory;
|
| - std::vector<Handle<FixedArray>> second_page_handles =
|
| - CreatePadding(heap, free_on_second_page, TENURED, object_size);
|
| - // Mark the second page for evacuation.
|
| - to_be_aborted_page =
|
| - Page::FromAddress(second_page_handles.front()->address());
|
| - to_be_aborted_page->SetFlag(
|
| - MemoryChunk::FORCE_EVACUATION_CANDIDATE_FOR_TESTING);
|
| -
|
| - for (size_t i = second_page_handles.size() - 1; i > 0; i--) {
|
| - second_page_handles[i]->set(0, *second_page_handles[i - 1]);
|
| - }
|
| - first_page_handles.front()->set(0, *second_page_handles.back());
|
| - }
|
| -
|
| - {
|
| - // Add a third page that is filled with {num_objects} objects of size
|
| - // {object_size}.
|
| - HandleScope scope3(isolate);
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - const int num_objects = 2;
|
| - int used_memory = object_size * num_objects;
|
| - std::vector<Handle<FixedArray>> third_page_handles =
|
| - CreatePadding(heap, used_memory, TENURED, object_size);
|
| - Page* third_page =
|
| - Page::FromAddress(third_page_handles.front()->address());
|
| - heap->set_force_oom(true);
|
| - heap->CollectAllGarbage();
|
| -
|
| - // The following check makes sure that we compacted "some" objects, while
|
| - // leaving others in place.
|
| - bool in_place = true;
|
| - Handle<FixedArray> current = first_page_handles.front();
|
| - while (current->get(0) != heap->undefined_value()) {
|
| - current = Handle<FixedArray>(FixedArray::cast(current->get(0)));
|
| - CHECK(current->IsFixedArray());
|
| - if (Page::FromAddress(current->address()) != to_be_aborted_page) {
|
| - in_place = false;
|
| - }
|
| - bool on_aborted_page =
|
| - Page::FromAddress(current->address()) == to_be_aborted_page;
|
| - bool on_third_page =
|
| - Page::FromAddress(current->address()) == third_page;
|
| - CHECK((in_place && on_aborted_page) || (!in_place && on_third_page));
|
| - }
|
| - // Check that we at least migrated one object, as otherwise the test would
|
| - // not trigger.
|
| - CHECK(!in_place);
|
| -
|
| - CheckInvariantsOfAbortedPage(to_be_aborted_page);
|
| - }
|
| - }
|
| -}
|
| -
|
| -
|
| -HEAP_TEST(CompactionPartiallyAbortedPageWithStoreBufferEntries) {
|
| - // Test the scenario where we reach OOM during compaction and parts of the
|
| - // page have already been migrated to a new one. Objects on the aborted page
|
| - // are linked together and the very first object on the aborted page points
|
| - // into new space. The test verifies that the store buffer entries are
|
| - // properly cleared and rebuilt after aborting a page. Failing to do so can
|
| - // result in other objects being allocated in the free space where their
|
| - // payload looks like a valid new space pointer.
|
| -
|
| - FLAG_manual_evacuation_candidates_selection = true;
|
| -
|
| - const int object_size = 128 * KB;
|
| -
|
| - CcTest::InitializeVM();
|
| - Isolate* isolate = CcTest::i_isolate();
|
| - Heap* heap = isolate->heap();
|
| - // Disable concurrent sweeping to ensure memory is in an expected state, i.e.,
|
| - // we can reach the state of a half aborted page. We cannot just set
|
| - // {FLAG_concurrent_sweeping} because the flag is cached in heap, which is
|
| - // initialized earlier.
|
| - heap->concurrent_sweeping_enabled_ = false;
|
| - {
|
| - HandleScope scope1(isolate);
|
| - // Fill up the first page since it cannot be evacuated.
|
| - auto first_page_handles = FillUpFirstOldSpacePage(heap);
|
| -
|
| - Page* to_be_aborted_page = nullptr;
|
| - {
|
| - HandleScope temporary_scope(isolate);
|
| - // Fill the second page with objects of size {object_size} (last one is
|
| - // properly adjusted).
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - auto second_page_handles =
|
| - CreatePadding(heap, Page::kAllocatableMemory, TENURED, object_size);
|
| - // Mark the second page for evacuation.
|
| - to_be_aborted_page =
|
| - Page::FromAddress(second_page_handles.front()->address());
|
| - to_be_aborted_page->SetFlag(
|
| - MemoryChunk::FORCE_EVACUATION_CANDIDATE_FOR_TESTING);
|
| -
|
| - for (size_t i = second_page_handles.size() - 1; i > 0; i--) {
|
| - second_page_handles[i]->set(0, *second_page_handles[i - 1]);
|
| - }
|
| - first_page_handles.front()->set(0, *second_page_handles.back());
|
| - Handle<FixedArray> new_space_array =
|
| - isolate->factory()->NewFixedArray(1, NOT_TENURED);
|
| - CHECK(heap->InNewSpace(*new_space_array));
|
| - second_page_handles.front()->set(1, *new_space_array);
|
| - }
|
| -
|
| - {
|
| - // Add a third page that is filled with {num_objects} objects of size
|
| - // {object_size}.
|
| - HandleScope scope3(isolate);
|
| - heap->old_space()->EmptyAllocationInfo();
|
| - const int num_objects = 2;
|
| - int used_memory = object_size * num_objects;
|
| - std::vector<Handle<FixedArray>> third_page_handles =
|
| - CreatePadding(heap, used_memory, TENURED, object_size);
|
| - Page* third_page =
|
| - Page::FromAddress(third_page_handles.front()->address());
|
| - heap->set_force_oom(true);
|
| - heap->CollectAllGarbage();
|
| -
|
| - // The following check makes sure that we compacted "some" objects, while
|
| - // leaving others in place.
|
| - bool in_place = true;
|
| - Handle<FixedArray> current = first_page_handles.front();
|
| - while (current->get(0) != heap->undefined_value()) {
|
| - current = Handle<FixedArray>(FixedArray::cast(current->get(0)));
|
| - CHECK(!heap->InNewSpace(*current));
|
| - CHECK(current->IsFixedArray());
|
| - if (Page::FromAddress(current->address()) != to_be_aborted_page) {
|
| - in_place = false;
|
| - }
|
| - bool on_aborted_page =
|
| - Page::FromAddress(current->address()) == to_be_aborted_page;
|
| - bool on_third_page =
|
| - Page::FromAddress(current->address()) == third_page;
|
| - CHECK((in_place && on_aborted_page) || (!in_place && on_third_page));
|
| - }
|
| - // Check that we at least migrated one object, as otherwise the test would
|
| - // not trigger.
|
| - CHECK(!in_place);
|
| -
|
| - CheckInvariantsOfAbortedPage(to_be_aborted_page);
|
| -
|
| - // Allocate a new object in new space.
|
| - Handle<FixedArray> holder =
|
| - isolate->factory()->NewFixedArray(10, NOT_TENURED);
|
| - // Create a broken address that looks like a tagged pointer to a new space
|
| - // object.
|
| - Address broken_address = holder->address() + 2 * kPointerSize + 1;
|
| - // Convert it to a vector to create a string from it.
|
| - Vector<const uint8_t> string_to_broken_addresss(
|
| - reinterpret_cast<const uint8_t*>(&broken_address), 8);
|
| -
|
| - Handle<String> string;
|
| - do {
|
| - // We know that the interesting slot will be on the aborted page and
|
| - // hence we allocate until we get our string on the aborted page.
|
| - // We used slot 1 in the fixed size array which corresponds to the
|
| - // the first word in the string. Since the first object definitely
|
| - // migrated we can just allocate until we hit the aborted page.
|
| - string = isolate->factory()
|
| - ->NewStringFromOneByte(string_to_broken_addresss, TENURED)
|
| - .ToHandleChecked();
|
| - } while (Page::FromAddress(string->address()) != to_be_aborted_page);
|
| -
|
| - // If store buffer entries are not properly filtered/reset for aborted
|
| - // pages we have now a broken address at an object slot in old space and
|
| - // the following scavenge will crash.
|
| - heap->CollectGarbage(NEW_SPACE);
|
| - }
|
| - }
|
| -}
|
| -
|
| -} // namespace internal
|
| -} // namespace v8
|
|
|