880190 - Assertion failure: !cx->isExceptionPending(), at vm/Interpreter.cpp:3162 with OOM

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following testcase asserts on mozilla-central revision 204de5b7e0a6 (run with --ion-eager):


function SameValue(expected, actual, description) {}
function currentFunc()
function BigO(data) {}
function compareSource(expect, actual, summary) {}
function optionsInit() {}
var lfcode = new Array();
lfcode.push("gcparam('maxBytes', gcparam('gcBytes') + 4*1024);");
lfcode.push("\
function testLenientAndStrict(\
code, lenient_pred, strict_pred\
) {}\
function raisesException(exception) {\
      eval(code);\
};\
function parsesSuccessfully(code) {};\
function parseRaisesException(exception) {};\
function clean_uneval(val) {}\
function deepEqual(a, b) {}\
");
lfcode.push("\
base =\
(function(){\
eval('throw new Error()')\
})();\
");
while (true) {
  var file = lfcode.shift(); if (file == undefined) { break; }
  loadFile(file)
}
function loadFile(lfVarx) {
    try {
      lfRunTypeId = parseInt(lfVarx);
      eval("(function() { " + lfVarx + " })();"); 
    } catch (lfVare) {    }
}

Comment 1

[Christian Holler (:decoder)]

Attachment: [crash-signature] Machine-readable crash signature

Comment 2

[Christian Holler (:decoder)]

Jason, is this likely the same problem as bug 877437?

Comment 3

[Christian Holler (:decoder)]

JSBugMon: The testcase found in this bug no longer reproduces (tried revision b7175c5829b5).

Comment 4

[Jason Orendorff [:jorendorff]]

I can't reproduce this in rev 204de5b7e0a6, debug build, with --ion-eager.

Does it still reproduce for you? Is it linux-only?

Comment 5

[Christian Holler (:decoder)]

Not sure if this particular one is still present, I get lots of these assertions but possibly with different causes. I'll close this one as WFM and file new ones.