Closed Bug 729773 Opened 12 years ago Closed 12 years ago

[IncrementalGC] "Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing))" with adoptNode, gczeal(4)

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 715761

People

(Reporter: jruderman, Assigned: billm)

References

Details

(Keywords: assertion, testcase)

Attachments

(2 files)

testcase
362 bytes, text/html
Details
stack trace
8.18 KB, text/plain
Details
Attached file testcase — 
1. Install https://www.squarefree.com/extensions/domFuzzLite3.xpi
2. Load the testcase

Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at js/src/jsgc.cpp:4364

(Continuation of bug 704258?)

(I'm confused: why does gczeal(4) matter even when followed by gczeal(0)?)
Attached file stack trace — 
Assignee: general → wmccloskey

    
    

    
  
Once bug 715761 is fully landed (just one more small patch to go), this will get fixed.
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → DUPLICATE

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: