mops testcase is crashing on linux debugger shell

VERIFIED FIXED

Status

VERIFIED FIXED
9 years ago
9 years ago

People

(Reporter: brbaker, Assigned: lhansen)

Tracking

unspecified
x86
Linux
Bug Flags:
flashplayer-triage +

Details

(Whiteboard: INJECTION)

(Reporter)

Description

9 years ago
Recent changes for bug 545295 has introduced a failure on linux32 bit (found in the smokes phase of the build).

I was able to reproduce the issue:
using debug-debugger build:
avmshell_sd mops.abc_
Assertion failed: "(((!block->inUse())))" ("/home/build/buildbot/tamarin-redux/linux/repo/MMgc/GCHeap.h":853)

using release-debugger and gdb
avmshell_s
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -1211119296 (LWP 24372)]
0x080993cc in MMgc::GCHeap::CreateCommittedBlock ()
(gdb) bt
#0  0x080993cc in MMgc::GCHeap::CreateCommittedBlock ()
#1  0x0809b003 in MMgc::GCHeap::AllocBlock ()
#2  0x0809b685 in MMgc::GCHeap::Alloc ()
#3  0x0808861c in MMgc::GC::AllocBlock ()
#4  0x0809bc11 in MMgc::GCLargeAlloc::Alloc ()
#5  0x080aaae4 in avmplus::AtomArray::checkCapacity ()
#6  0x080ab03d in avmplus::AtomArray::push ()
#7  0x080a9f0d in avmplus::ArrayObject::AS3_push ()
#8  0x080ec640 in avmplus::MethodInfo::debugEnterExitWrapper32 ()
Flags: flashplayer-triage+
Flags: flashplayer-qrb?
(Reporter)

Comment 1

9 years ago
Additional failures with same assert are also happening on linux64 and mac64 running test/performance/language/string/typed/split.abc

Comment 2

9 years ago
I'm also seeing this on mac10.5 32 bit so its not just 64 bit
(Assignee)

Updated

9 years ago
Assignee: nobody → lhansen
(Assignee)

Comment 3

9 years ago
Fix coming, here's a preview:

GCHeap.cpp:

@@ -1051,7 +1058,7 @@
                    }
                    
                    // Coalesce with successors
-                    HeapBlock *nextBlock = firstFree + firstFree->size;
+                    HeapBlock *nextBlock = block + block->size;
                    while (totalSize < size + firstSlop && !(nextBlock->inUse() || nextBlock->size == 0)) {
(Assignee)

Comment 4

9 years ago
tamarin-redux-argo changeset:   3899:9cddce1f5706
Status: NEW → RESOLVED
Last Resolved: 9 years ago
Resolution: --- → FIXED
(Reporter)

Comment 6

9 years ago
verified fix in tr-argo 3906 and tr 4287
Status: RESOLVED → VERIFIED
Flags: flashplayer-qrb?
You need to log in before you can comment on or make changes to this bug.