366606 - JS Assertion with Firebug 0.4.1 on branch build

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect, P1)

Description

[Robert Sayre]

Attachment: JS stack and C stack

I'm hitting this assertion pretty regularly with Firebug 0.4.1 in a branch build.

Assertion failure: scope->ownercx == cx, at /Users/sayrer/bonecho/mozilla/js/src/jslock.c:1286

Comment 1

[Brendan Eich [:brendan]]

Attachment: fix assertion

This applies to the trunk, the 1.8 branch, and the 1.8.0 branch.

/be

Comment 2

[Brendan Eich [:brendan]]

Thanks to sayrer for lengthy gdb over irc fun, including running into what seems to be a Macbook Pro CPU cache coherence prob (perhaps gdb's fault?).

/be

Comment 3

[Brendan Eich [:brendan]]

(In reply to comment #2)
> Thanks to sayrer for lengthy gdb over irc fun, including running into what
> seems to be a Macbook Pro CPU cache coherence prob (perhaps gdb's fault?).

(Or more likely Mac OS X's fault...)

/be

Comment 4

[Robert Sayre]

Comment on attachment 251130 [details] [diff] [review]
fix assertion

This patch suppresses the assertion for me.

Comment 5

[Brendan Eich [:brendan]]

Fixed everywhere -- don't feel the need to get approval for an assertion fix.

trunk: js/src/jslock.c rev 3.61
1.8:   js/src/jslock.c rev 3.55.20.1
1.8.0: js/src/jslock.c rev 3.55

/be