Assertion failure: windowLength <= windowRadius * 2, at frontend/TokenStream.cpp

RESOLVED FIXED in mozilla33

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: gkw, Assigned: bhackett)

Tracking

(Blocks: 1 bug, {assertion, regression, testcase})

Trunk
mozilla33
x86_64
Mac OS X
assertion, regression, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [jsbugmon:update])

Attachments

(3 attachments)

(Reporter)

Description

3 years ago
Created attachment 8439596 [details]
stack

The upcoming testcase asserts js debug shell on m-c changeset aab3362f97e9 with --ion-eager --ion-parallel-compile=off at Assertion failure: windowLength <= windowRadius * 2, at frontend/TokenStream.cpp

My configure flags are:

CC="clang -Qunused-arguments" CXX="clang++ -Qunused-arguments" AR=ar sh /Users/skywalker/trees/mozilla-central/js/src/configure --target=x86_64-apple-darwin12.5.0 --enable-optimize --enable-debug --enable-profiling --enable-gczeal --enable-debug-symbols --disable-tests --enable-more-deterministic --with-ccache --enable-threadsafe <other NSPR options>

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   https://hg.mozilla.org/mozilla-central/rev/43acd23f5a98
user:        Brian Hackett
date:        Thu May 15 16:48:21 2014 -0700
summary:     Bug 976446 - Add port of irregexp regexp engine, and use by default, r=jandem.

Brian, is bug 976446 a likely regressor?
Flags: needinfo?(bhackett1024)
(Reporter)

Comment 1

3 years ago
Created attachment 8439598 [details]
testcase

$ ./js-dbg-64-dm-ts-darwin-aab3362f97e9 --ion-eager --ion-parallel-compile=off testcase.js
Assertion failure: windowLength <= windowRadius * 2, at /Users/skywalker/trees/mozilla-central/js/src/frontend/TokenStream.cpp:683
Segmentation fault: 11
(Assignee)

Comment 2

3 years ago
Created attachment 8442965 [details] [diff] [review]
patch

Computing a caller filename when one wasn't provided confused the code that prints leading/trailing context for error messages.
Assignee: nobody → bhackett1024
Attachment #8442965 - Flags: review?(jdemooij)
Flags: needinfo?(bhackett1024)
(Reporter)

Comment 3

3 years ago
Please land this testcase as well - I recall this one was a pain to reduce. Thanks! :)

Updated

3 years ago
Attachment #8442965 - Flags: review?(jdemooij) → review+
(Assignee)

Comment 4

3 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/de4ce465c58c
https://hg.mozilla.org/mozilla-central/rev/de4ce465c58c
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla33
You need to log in before you can comment on or make changes to this bug.