ARCHIVE

Blog

The English edition of my blog.

The object returned by Boa’s getter was collected by the garbage collector while the inline cache was being updated.

Investigating the SIGSEGV that occurred in Omoikane’s WPT revealed that the new object returned by Boa’s getter in the Rust‑based JavaScript engine was being reclaimed during the inline‑cache update before it could be placed in a VM register. We are isolating the issue with the JIT, verifying it with Valgrind, and tracking the root fix along with regression tests.

→