Closed Bug 292167 Opened 19 years ago Closed 19 years ago

E4X - GC Crash in online e4x/Regress/regress-280844-1.js

Categories

(Core :: JavaScript Engine, defect)

x86
Windows XP
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 280844

People

(Reporter: bc, Assigned: brendan)

References

()

Details

(Keywords: crash)

Run js/tests/e4x/Regress/regress-280844-1.js in the browser (see bclary.com for
hosted version) in WinXP.

Heisenbug crashes multiple locations due to gc related problem. Stack to
xml_DeutschSchorrWaite

xml_DeutschSchorrWaite(JSContext * 0x04b3e080, JSXML * 0x04c8e8e0, void *
0x00000000) line 7118
js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8e8e0, void * 0x00000000) line
7211 + 17 bytes
MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, unsigned char *
0x04c8e69c) line 1251 + 15 bytes
js_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, void * 0x00000000)
line 1424 + 17 bytes
JS_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e8e0, const char *
0x011cc5ec _js_xml_parent_str, void * 0x00000000) line 1741 + 15 bytes
js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8e980, void * 0x00000000) line
7213 + 25 bytes
MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, unsigned char *
0x04c8e6b0) line 1251 + 15 bytes
js_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, void * 0x00000000)
line 1424 + 17 bytes
JS_MarkGCThing(JSContext * 0x04b3e080, void * 0x04c8e980, const char *
0x011cc5ec _js_xml_parent_str, void * 0x00000000) line 1741 + 15 bytes
js_MarkXML(JSContext * 0x04b3e080, JSXML * 0x04c8ea20, void * 0x00000000) line
7213 + 25 bytes

... ad infinitum
Severity: major → critical

*** This bug has been marked as a duplicate of 280844 ***
Status: NEW → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.