[Webkit-unassigned] [Bug 233206] [JSC] indirect eval GC/memory leak

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=233206

--- Comment #2 from Phillip Mates <pmates at igalia.com> ---
I change `prune` in runtime/CodeCache.h to just be `m_map.clear()` and it stops crashing. Given this, I believe that the pruning/flushing to disk logic that clears the code cache map, and thus allows for releasing otherwise gc'able executable objects, isn't sensitive to GC/memory needs.

Not sure what the best way forward would be. Some random ideas:
 - use some sort of weak hashmap that allowed for gc'ing objects even if they appear in the code cache map. 
 - couple code cache map with the executable allocator and allow the allocator to clear the map. 
 - tweak the code cache heuristics, such as the workingSetMaxBytes parameter

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211117/ec469ebd/attachment.htm>