dbd7840254
* chore: bump chromium in DEPS to 130.0.6669.0 Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com> * 5789734: Consolidate all the accessibility scale factor utility code into one file https://chromium-review.googlesource.com/c/chromium/src/+/5789734 Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> * 5798543: [autofill] Don't emit autofill audit reports if inspector not connected https://chromium-review.googlesource.com/c/chromium/src/+/5798543 Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> * 5797073: [wasm] Spill all loop inputs before entering loop https://chromium-review.googlesource.com/c/v8/v8/+/5797073 Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> * chore: fixup patch indices Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> * 5795224: Version 13.0.0 https://chromium-review.googlesource.com/c/v8/v8/+/5795224 Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com> --------- Co-authored-by: trop[bot] <37223003+trop[bot]@users.noreply.github.com> Co-authored-by: electron-roller[bot] <84116207+electron-roller[bot]@users.noreply.github.com> Co-authored-by: Shelley Vohr <shelley.vohr@gmail.com>
61 lines
3 KiB
Diff
61 lines
3 KiB
Diff
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
From: Calvin Watford <cwatford@slack-corp.com>
|
|
Date: Wed, 17 Jul 2024 12:52:10 -0600
|
|
Subject: fix: disable scope reuse & associated dchecks
|
|
|
|
This change was introduced in https://crrev.com/c/5630974 which reuses
|
|
scope info objects across allocations. Unfortunately, this change seems
|
|
to be not yet fully cooked and causes crashes with normal usage of V8.
|
|
|
|
In particular, Node.js call's V8's `v8::ScriptCompiler::CompileFunction`
|
|
method. This ends up wrapping the source code in a function, which this
|
|
code is not yet prepared to handle. The generated function wrapper
|
|
(created by V8) has no source position, so it reports being at the start
|
|
of the source, which may overlap with other scopes that are in the
|
|
original source. This new feature adds a "UniqueIdInScript" concept that
|
|
is derived from the source position of a scope, along with the invariant
|
|
that inner scopes have a higher ID than outer scopes, which does not
|
|
hold for the above situation.
|
|
|
|
This patch is not intended to remain indefinitely. Once the upstream
|
|
feature stabilizes, we can remove this patch. Unfortunately, there is no
|
|
public tracking bug for this feature nor the crashes its been causing,
|
|
so we'll have to keep an eye on this for the time being.
|
|
|
|
diff --git a/src/ast/scopes.cc b/src/ast/scopes.cc
|
|
index 57a9dca1a84dee95d36c2b296fc170399db3e213..5db78a650068faa0bacf05b13d86860c9616e20e 100644
|
|
--- a/src/ast/scopes.cc
|
|
+++ b/src/ast/scopes.cc
|
|
@@ -2731,10 +2731,10 @@ void Scope::AllocateScopeInfosRecursively(
|
|
for (Scope* scope = inner_scope_; scope != nullptr; scope = scope->sibling_) {
|
|
#ifdef DEBUG
|
|
if (!scope->is_hidden_catch_scope()) {
|
|
- DCHECK_GT(scope->UniqueIdInScript(), UniqueIdInScript());
|
|
- DCHECK_IMPLIES(
|
|
- scope->sibling_ && !scope->sibling_->is_hidden_catch_scope(),
|
|
- scope->sibling_->UniqueIdInScript() != scope->UniqueIdInScript());
|
|
+ // DCHECK_GT(scope->UniqueIdInScript(), UniqueIdInScript());
|
|
+ // DCHECK_IMPLIES(
|
|
+ // scope->sibling_ && !scope->sibling_->is_hidden_catch_scope(),
|
|
+ // scope->sibling_->UniqueIdInScript() != scope->UniqueIdInScript());
|
|
}
|
|
#endif
|
|
if (!scope->is_function_scope() ||
|
|
diff --git a/src/flags/flag-definitions.h b/src/flags/flag-definitions.h
|
|
index fe346c46296c9b665e0a2bdd5127e929f6c91b3c..80790f627c069572f87a803bb16a312ae75e3dbe 100644
|
|
--- a/src/flags/flag-definitions.h
|
|
+++ b/src/flags/flag-definitions.h
|
|
@@ -964,7 +964,12 @@ DEFINE_BOOL(trace_track_allocation_sites, false,
|
|
DEFINE_BOOL(trace_migration, false, "trace object migration")
|
|
DEFINE_BOOL(trace_generalization, false, "trace map generalization")
|
|
|
|
-DEFINE_BOOL(reuse_scope_infos, true, "reuse scope infos from previous compiles")
|
|
+// ELECTRON: The following flag should remain false by default until we can
|
|
+// remove `fix_disable_scope_reuse_associated_dchecks.patch`
|
|
+DEFINE_BOOL(reuse_scope_infos, false,
|
|
+ "reuse scope infos from previous compiles")
|
|
+
|
|
+DEFINE_IMPLICATION(fuzzing, reuse_scope_infos)
|
|
|
|
// Flags for Sparkplug
|
|
#undef FLAG
|