Closed Bug 1805631 Opened 2 years ago Closed 2 years ago

Race condition in ArrayBufferViewObject::trace during parallel marking

Categories

(Core :: JavaScript: GC, task)

task

Tracking

()

RESOLVED FIXED
110 Branch
Tracking Status
firefox110 --- fixed

People

(Reporter: jonco, Assigned: jonco)

References

(Blocks 1 open bug)

Details

Attachments

(1 file)

This trace method can also cause a race during parallel marking as it always updates the view's data pointer regardless of whether it has changed.

Along the same lines as recent changes, it is unnecessary to update this if it
hasn't changed and it can cause a data race when during parallel marking.

Assignee: nobody → jcoppeard
Status: NEW → ASSIGNED
Attachment #9308219 - Attachment description: Bug 1805631 - Don't update array buffer view object's data pointer if it hasn't change r?sfink → Bug 1805631 - Don't update array buffer view object's data pointer if it hasn't changed r?sfink
Pushed by jcoppeard@mozilla.com: https://hg.mozilla.org/integration/autoland/rev/9e1bb956dc0d Don't update array buffer view object's data pointer if it hasn't changed r=sfink
Status: ASSIGNED → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 110 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: