Bug 1724599 Comment 13 Edit History

Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.

Original comment by
on 
This is the assert at the start of ShouldMarkCrossCompartment failing:
```
  MarkColor color = marker->markColor();

  if (!dstCell->isTenured()) {
    MOZ_ASSERT(color == MarkColor::Black);
    return false;
  }
```

So we're trying to mark a proxy gray and it's target is a nursery object.  The target must have been allocated since the start of collection otherwise it would have been tenured.  The proxy must have been allocated before the start of the collection otherwise it would be marked black.  The JS engine doesn't touch gray things so this shouldn't happen.

Failures started on 7th August.
Revision 1 by
on 
This is the assert at the start of ShouldMarkCrossCompartment failing:
```
  MarkColor color = marker->markColor();

  if (!dstCell->isTenured()) {
    MOZ_ASSERT(color == MarkColor::Black);
    return false;
  }
```

So we're trying to mark a proxy gray and its target is a nursery object.  The target must have been allocated since the start of collection otherwise it would have been tenured.  The proxy must have been allocated before the start of the collection otherwise it would be marked black.  The JS engine doesn't touch gray things so this shouldn't happen.

Failures started on 7th August.

Back to Bug 1724599 Comment 13