Closed
Bug 707750
Opened 13 years ago
Closed 13 years ago
Assertion failure: static_cast<Cell *>(thing)->isMarked(), at jsgc.cpp:3530
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
FIXED
mozilla11
People
(Reporter: decoder, Assigned: billm)
References
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
1.20 KB,
patch
|
bhackett1024
:
review+
|
Details | Diff | Splinter Review |
The following test asserts on mozilla-central revision cb70391c86d9 (options -m -n -a): var lfcode = new Array(); lfcode.push("gczeal(4);"); lfcode.push('print(BUGNUMBER + ": " + (W -- ));'); while (true) { var file = lfcode.shift(); if (file == undefined) { break; } eval(file); } Not s-s due to gczeal(4) (incremental GC).
Assignee | ||
Comment 1•13 years ago
|
||
I think this somehow got broken during the objshrink merge.
Attachment #579456 -
Flags: review?(bhackett1024)
Updated•13 years ago
|
Attachment #579456 -
Flags: review?(bhackett1024) → review+
Assignee | ||
Comment 2•13 years ago
|
||
https://hg.mozilla.org/integration/mozilla-inbound/rev/66d577078bb1
Target Milestone: --- → mozilla11
Comment 3•13 years ago
|
||
https://hg.mozilla.org/mozilla-central/rev/66d577078bb1
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Reporter | ||
Comment 4•11 years ago
|
||
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug707750.js.
Flags: in-testsuite+
You need to log in
before you can comment on or make changes to this bug.
Description
•