We get an assertion in RemoveFromRootSet called via ~XPCTraceableVariant during cycle collection. This can be repro'd by running the given Mochitest directory, rerunning if necessary until it asserts.
Summary: tracing+fatvals: asser in mochitest dir content/events/test/ → tracing+fatvals: assert in mochitest dir content/events/test/
http://hg.mozilla.org/users/lwagner_mozilla.com/fatval/rev/37df8fd77168 A little story: those stupid *.rej files from |patch| found the bug for me. I had added some printfs to fatval to see what's going on, and found that RemoveFromRootSet was getting called twice for the same object. To find out which of the two calls was 'wrong', I applied the same patch to tracemonkey. But I got a reject, and looking at the .rej file, I saw that the context had changed in the nearby method XPCTraceableVariant::TraceJS. Clearly a difference in that function might mess up cycle collection, so I looked at it and saw the missing test.
Status: NEW → RESOLVED
Last Resolved: 8 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.