Closed Bug 487531 Opened 17 years ago Closed 17 years ago

Assertion failure running Dromaeo benchmarks: !_fragment->vmprivate && ti && cx->fp->regs->pc == (jsbytecode*)_fragment->ip, at /home/jimb/mc/in/js/src/jstracer.cpp:1223

Categories

(Core :: JavaScript Engine, defect, P1)

x86
Linux
defect

Tracking

()

VERIFIED FIXED
mozilla1.9.1b4

People

(Reporter: jimb, Assigned: gal)

References

()

Details

(Keywords: verified1.9.1, Whiteboard: fixed-in-tracemonkey)

Attachments

(1 file)

In TM changeset 2dd9a5df7cb4, visiting the above URL and clicking "Run" yields the following assertion: Assertion failure: !_fragment->vmprivate && ti && cx->fp->regs->pc == (jsbytecode*)_fragment->ip, at /home/jimb/mc/in/js/src/jstracer.cpp:1223
Summary: Assertion failure running Dromaeo benchmarks: → Assertion failure running Dromaeo benchmarks: !_fragment->vmprivate && ti && cx->fp->regs->pc == (jsbytecode*)_fragment->ip, at /home/jimb/mc/in/js/src/jstracer.cpp:1223
Assignee: general → gal
Is that a TM changeset?
Assignee: gal → general
Confirmed with tip.
Fixed. Testing.
Attached patch patch Splinter Review
This is probably mostly cosmetic. I don't think we actually read or rely on branch fragment's ip. Anyway, should still fix. Making this p1 since it hits asserts in debug builds.
Assignee: general → gal
Attachment #371763 - Flags: review?(graydon)
Flags: blocking1.9.1?
Priority: -- → P1
Target Milestone: --- → mozilla1.9.1b4
covered by ecma/Date/15.9.5.10-7.js in the browser at least.
Flags: in-testsuite+
Flags: blocking1.9.1? → blocking1.9.1+
Review ping.
Attachment #371763 - Flags: review?(graydon) → review+
Comment on attachment 371763 [details] [diff] [review] patch I'm a little nervous about fragments-with-null-code surviving a failed recording attempt, rather than just freeing them and nulling out anchor->target again. But if you think it's safe, I'll defer to your judgment here. Clearly the patch will fix the assert.
Whiteboard: fixed-in-tracemonkey
Status: NEW → RESOLVED
Closed: 17 years ago
Resolution: --- → FIXED
v 1.9.1, 1.9.2
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: