Closed Bug 658209 Opened 13 years ago Closed 13 years ago

TI+JM: Assertion failure: !cx->compartment->activeAnalysis, at jsinterp.cpp:624

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: jandem, Unassigned)

References

Details

--
for (var i=0; i<20; i++) {
    (function () {
        var x;
        (function () {
            x = /abc/;
            x++;
            gc();
        })();
    })();
}
--
$ ./js -m -n test.js
Assertion failure: !cx->compartment->activeAnalysis, at jsinterp.cpp:624

Revision 4dff743ec04d, 32-bit OS X.
Good, new assertion which caught a bug introduced with the interpoline.  We should never reenter the interpreter or JIT code while analysis is active (recompilation will not happen until analysis finishes, and no scripts or type objects can be collected by GC), but this was possible while finishing up an operation if we rejoined into the middle of an INC/DEC op.

http://hg.mozilla.org/projects/jaegermonkey/rev/47e5a6ca466e
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.