Closed
Bug 1805631
Opened 2 years ago
Closed 2 years ago
Race condition in ArrayBufferViewObject::trace during parallel marking
Categories
(Core :: JavaScript: GC, task)
Core
JavaScript: GC
Tracking
()
RESOLVED
FIXED
110 Branch
Tracking | Status | |
---|---|---|
firefox110 | --- | fixed |
People
(Reporter: jonco, Assigned: jonco)
References
(Blocks 1 open bug)
Details
Attachments
(1 file)
This trace method can also cause a race during parallel marking as it always updates the view's data pointer regardless of whether it has changed.
Assignee | ||
Comment 1•2 years ago
|
||
Along the same lines as recent changes, it is unnecessary to update this if it
hasn't changed and it can cause a data race when during parallel marking.
Updated•2 years ago
|
Assignee: nobody → jcoppeard
Status: NEW → ASSIGNED
Updated•2 years ago
|
Attachment #9308219 -
Attachment description: Bug 1805631 - Don't update array buffer view object's data pointer if it hasn't change r?sfink → Bug 1805631 - Don't update array buffer view object's data pointer if it hasn't changed r?sfink
Pushed by jcoppeard@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/9e1bb956dc0d
Don't update array buffer view object's data pointer if it hasn't changed r=sfink
Comment 3•2 years ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox110:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 110 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•