YJIT: Side exit if splat exceeds max stack size we track

bootstraptest/test_yjit.rb

@@ -3947,3 +3947,19 @@ def calling_my_func
 
   calling_my_func
 }
+
+# Fix failed case for large splat
+assert_equal 'true', %q{
+  def d(a, b=:b)
+  end
+
+  def calling_func
+    ary = 1380888.times;
+    d(*ary)
+  end
+  begin
+    calling_func
+  rescue ArgumentError
+    true
+  end
+}

yjit/src/codegen.rs

@@ -1896,6 +1896,8 @@ pub const SEND_MAX_CHAIN_DEPTH: i32 = 20;
 // up to 20 different offsets for case-when
 pub const CASE_WHEN_MAX_DEPTH: i32 = 20;
 
+pub const MAX_SPLAT_LENGTH: i32 = 127;
+
 // Codegen for setting an instance variable.
 // Preconditions:
 //   - receiver is in REG0
@@ -5875,6 +5877,10 @@ fn gen_send_iseq(
             // all the remaining arguments. In the generated code
             // we test if this is true and if not side exit.
             argc = argc - 1 + array_length as i32 + remaining_opt as i32;
+            if argc + asm.ctx.get_stack_size() as i32 > MAX_SPLAT_LENGTH {
+                gen_counter_incr!(asm, send_splat_too_long);
+                return None;
+            }
             push_splat_args(array_length, asm);
 
             for _ in 0..remaining_opt {

yjit/src/stats.rs

@@ -261,6 +261,7 @@ make_counters! {
     send_args_splat_cfunc_zuper,
     send_args_splat_cfunc_ruby2_keywords,
     send_iseq_splat_arity_error,
+    send_splat_too_long,
     send_iseq_ruby2_keywords,
     send_send_not_imm,
     send_send_wrong_args,