1604787 - Assertion failure: (lazy & MatchedFlagsMask) == (nonLazy & MatchedFlagsMask), at /builds/worker/workspace/build/src/js/src/frontend/BytecodeCompiler.cpp:977

Status: RESOLVED DUPLICATE of bug 1604792

(Core :: JavaScript Engine, defect)

Description

[Bob Clary [:bc] (inactive)]

Attachment: Log containing assertion and stack

1. https://us.puma.com/en/us/mens/shoes

Nightly Linux (Fedora) at least. Does not reproduce on Beta. This may be a recent regression but I haven't checked.

2. Assertion failure: (lazy & MatchedFlagsMask) == (nonLazy & MatchedFlagsMask), at /builds/worker/workspace/build/src/js/src/frontend/BytecodeCompiler.cpp:977

Assertion failure: (lazy & MatchedFlagsMask) == (nonLazy & MatchedFlagsMask), at /builds/worker/workspace/build/src/js/src/frontend/BytecodeCompiler.cpp:977

Program /mozilla/builds/nightly/mozilla/firefox-debug/dist/bin/firefox-bin (pid = 14446) received signal 11.
Stack:
[Parent 14336, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/workspace/build/src/ipc/glue/ProtocolUtils.cpp, line 481
[Parent 14336, Main Thread] WARNING: IPC message discarded: actor cannot send: file /builds/worker/workspace/build/src/ipc/glue/ProtocolUtils.cpp, line 481
#01: WasmTrapHandler(int, siginfo*, void*) (/mozilla/builds/nightly/mozilla/firefox-debug/dist/bin/libxul.so)
#02: __restore_rt (sigaction.c:?)
#03: js::frontend::CompileLazyFunction(JSContext*, JS::Handle<js::LazyScript*>, char16_t const*, unsigned long) (/mozilla/builds/nightly/mozilla/firefox-debug/dist/bin/libxul.so)
#04: JSFunction::delazifyLazilyInterpretedFunction(JSContext*, JS::Handle<JSFunction*>) (/mozilla/builds/nightly/mozilla/firefox-debug/dist/bin/libxul.so)
#05: JSFunction::getOrCreateScript(JSContext*, JS::Handle<JSFunction*>) (/mozilla/builds/nightly/mozilla/firefox-debug/dist/bin/libxul.so)
...

Security Sensitive just in case.

Comment 1

[Andrew McCreight [:mccr8]]

Ted, could you take a look? It looks like you just added this assert in bug 1604064. Thanks.

Comment 2

[Andrew McCreight [:mccr8]]

I won't rate this now, because I'm not sure what the security implications are. Also, these sorts of things often turn out to be overly tight assertions.

Comment 3

[Bob Clary [:bc] (inactive)]

This is probably a dupe of bug 1604792 which has a patch and which is public.

Comment 4

[Ted Campbell [:tcampbell]]

Thanks for the report. I was able to reproduce this and confirm it is Bug 1604792 (and fixed on autoland).