tracing+fatvals: assert in mochitest dir content/events/test/

RESOLVED FIXED

Status

()

Core
JavaScript Engine
RESOLVED FIXED
8 years ago
8 years ago

People

(Reporter: dmandelin, Assigned: dmandelin)

Tracking

Trunk
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Assignee)

Description

8 years ago
We get an assertion in RemoveFromRootSet called via ~XPCTraceableVariant during cycle collection. This can be repro'd by running the given Mochitest directory, rerunning if necessary until it asserts.
(Assignee)

Updated

8 years ago
Summary: tracing+fatvals: asser in mochitest dir content/events/test/ → tracing+fatvals: assert in mochitest dir content/events/test/
(Assignee)

Comment 1

8 years ago
http://hg.mozilla.org/users/lwagner_mozilla.com/fatval/rev/37df8fd77168

A little story: those stupid *.rej files from |patch| found the bug for me. I had added some printfs to fatval to see what's going on, and found that RemoveFromRootSet was getting called twice for the same object. To find out which of the two calls was 'wrong', I applied the same patch to tracemonkey. But I got a reject, and looking at the .rej file, I saw that the context had changed in the nearby method XPCTraceableVariant::TraceJS. Clearly a difference in that function might mess up cycle collection, so I looked at it and saw the missing test.
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.