Skip to content

--perf-basic-prof-only-functions flag is broken since v8 8.6 #50225

@lukealbao

Description

@lukealbao

Version

16.20.0

Platform

Linux [hostname] 5.4.254-170.358.amzn2.x86_64 #1 SMP Wed Sep 6 21:10:58 UTC 2023 x86_64 GNU/Linux

Subsystem

v8

What steps will reproduce the bug?

The --perf-basic-prof-only-functions flag is documented to be safe for production, and allows perf(1) to generate reports with JIT symbols. The emitted symbol table includes only addresses for js functions. This no longer happens, but it does for the more expensive --perf-basic-prof flag.

This script can reproduce the error:

#! /usr/bin/env bash

# Create a repro js script.
cat <<'eof' > /tmp/repro.js
  process.stdout.write(`${process.pid}`);

  const reproRe = /reproRe/gi;

  function reproFnOptimized() {
    for (let i = 0; i < 10000; i++) {
      const match = reproRe.exec(Math.random().toString());
    }
  }
  function reproFnInterpreted() {
      reproFnOptimized();
  }
  reproFnInterpreted();
  console.error(`[Using ${process.execArgv[0]}]: /tmp/perf-${process.pid}.map`);
eof

# Collect JIT symbols from the repro script.
basic_prof_pid="$(node --perf-basic-prof /tmp/repro.js)"
functions_only_pid="$(node --perf-basic-prof-only-functions /tmp/repro.js)"

# --perf-basic-prof emits function code kinds.
echo "=== Testing --perf-basic-prof output ==="
if ! grep -E --color 'reproFn\w+'  "/tmp/perf-${basic_prof_pid}.map"; then
  echo "--- (Repro Error): expected to find JS function symbols"
else
  echo '--- (Repro OK)'
fi

# --perf-basic-prof-only-functions does not emit JS functions, but does emit regex kinds.
echo "=== Testing --perf-basic-prof-only-functions output ==="
if grep -E --color 'reproFn\w+'  "/tmp/perf-${functions_only_pid}.map"; then
  echo "Error: expected not to find JS function symbols"
elif ! grep -E --color 'reproRe'  "/tmp/perf-${functions_only_pid}.map"; then
  echo "--- (Repro Error): expected to find RegEx symbols"
else
  echo '--- (Repro OK)'
fi

How often does it reproduce? Is there a required condition?

This bug is present in all versions that have v8 > 8.6. It's only applicable to Linux.

What is the expected behavior? Why is that the expected behavior?

Interpreted and optimized function frames should be logged.

What do you see instead?

No function frames, but there are regex frames.

Additional information

I originally opened this in nodejs/diagnostics#622.

Metadata

Metadata

Assignees

No one assigned

    Labels

    v8 engineIssues and PRs related to the V8 dependency.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions