1129676 - Assertion failure: src->length() > 0 && src->latin1OrTwoByteChar(0) == '(', at jsfun.cpp

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

I see this assertion intermittently on m-c changeset 3cda3997f45d at Assertion failure: src->length() > 0 && src->latin1OrTwoByteChar(0) == '(', at jsfun.cpp

Debug configure options:

AR=ar sh /home/gkwong/trees/mozilla-central/js/src/configure --enable-debug --enable-profiling --enable-nspr-build --enable-more-deterministic --with-ccache --enable-gczeal --enable-debug-symbols --disable-tests

I don't have any testcase that is reproducible, but I do have a stack this time.

Terrence and Jan tried taking a look, but have no idea what's going on...

Comment 1

[Terrence Cole [:terrence]]

The string header looks fine, the string contents appear to be K\133\0: probably corruption. It will be hard to get further unless we can get a reproducing test case or an rr capture of a failing run.

Comment 2

[Terrence Cole [:terrence]]

Additional note: this reproduces much more commonly on 32-core machines than it does on 4-core machines.

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

I no longer see this nowadays, will file a new bug if it still happens.