589750 - s390: Assertion failure: key->isAtomized(), at jsatom.cpp:554

Status: RESOLVED INCOMPLETE

(Core :: JavaScript Engine, defect)

Description

[Mike Hommey [:glandium]]

Stack trace:
(gdb) bt full
#0  0x77fbc512 in raise () from /lib/libpthread.so.0
No symbol table info available.
#1  0x00545214 in JS_Assert (s=<value optimized out>, file=<value optimized out>, ln=554) at jsutil.cpp:84
No locals.
#2  0x0043a2ee in js_AtomizeString (cx=<value optimized out>, str=<value optimized out>, flags=<value optimized out>) at jsatom.cpp:554
        length = <value optimized out>
        key = 0x77700000
        p = {<js::detail::HashTable<unsigned int const, js::HashSet<unsigned int, js::AtomHasher, js::SystemAllocPolicy>::SetOps, js::SystemAllocPolicy>::Ptr> = {entry = 0x5f4f80}, keyHash = 4294967294, 
          mutationCount = 0}
        atom = <value optimized out>
#3  0x0043b100 in js_Atomize (cx=<value optimized out>) at jsatom.cpp:594
        chars = 0x7f9cd50c
        str = {mLengthAndFlags = 0, {mChars = 0x7f9cd50c, mLeft = 0x7f9cd50c}, {mInlineStorage = {0, 0, 0, 0}, e = {{mCapacity = 0, mParent = 0x0, mBufferWithInfo = 0x0}, {mBase = 0x0, mRight = 0x0}}}, 
          static FLAT = 0, static DEPENDENT = 1, static INTERIOR_NODE = 2, static TOP_NODE = 3, static ROPE_BIT = 2, static ATOMIZED = 4, static MUTABLE = 8, static FLAGS_LENGTH_SHIFT = 4, 
          static ROPE_TRAVERSAL_COUNT_SHIFT = 2, static ROPE_TRAVERSAL_COUNT_MASK = 12, static ROPE_TRAVERSAL_COUNT_UNIT = 4, static TYPE_MASK = 3, static MAX_LENGTH = 268435455, 
          static INVALID_SMALL_CHAR = 255 '\377', static fromSmallChar = 0x5c61e0, 
          static toSmallChar = 0x5c6160 "\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377\377", static unitStringTable = 0x5c6300, static length2StringTable = 0x5c7300, static hundredStringTable = 0x5d7300, static intStringTable = 0x5d7cc0, 
          static deflatedIntStringTable = 0x59b08a "100", static deflatedUnitStringTable = 0x59b2fa "\302\200", static deflatedLength2StringTable = 0x59808a "00"}
        atom = <value optimized out>
        inflated = {0, 65535, 65521, 32076, 0, 5128, 96, 6788, 32668, 55336, 96, 6744, 57041, 16005, 0, 5, 96, 6744, 92, 11776, 32842, 10294, 32842, 10320, 32668, 54528, 88, 9948, 32668, 55336, 0, 1}
        inflatedLength = 0
        flags = <value optimized out>
#4  js_InitCommonAtoms (cx=<value optimized out>) at jsatom.cpp:377
        state = 0x5eca08
        atoms = 0x5eca58
#5  0x00440586 in js_NewContext (rt=0x5dc008, stackChunkSize=<value optimized out>) at jscntxt.cpp:886
        cxCallback = <value optimized out>
        cx = 0x601a58
#6  0x00403d32 in JSAPITest::createContext (this=<value optimized out>) at tests.h:255
        cx = <value optimized out>
#7  0x00404348 in JSAPITest::init (this=0x5d9820) at tests.h:128
No locals.
#8  0x00402e36 in main (argc=<value optimized out>, argv=<value optimized out>) at tests.cpp:57
        name = 0x5829c0 "selfTest_globalHasNoParent"
        test = 0x5d9820
        failures = 0
        filter = <value optimized out>

Comment 1

[Mike Hommey [:glandium]]

FWIW, jsapi-tests work with --disable-debug, except one:
testGCChunkAlloc
testGCChunkAlloc.cpp:81:(function() {    var array = [];    for (var i = max >> 1; i != 0;) {        --i;        array.push({});    }})();
TEST-UNEXPECTED-FAIL | testGCChunkAlloc | (function() {    var array = [];    for (var i = max >> 1; i != 0;) {        --i;        array.push({});    }})();

Comment 2

[Luke Wagner [:luke]]

Is this also sparc/sparc64?

Comment 3

[Mike Hommey [:glandium]]

no, this is s390

Comment 4

[Luke Wagner [:luke]]

Oh goodness, did not catch the "on s390" in the title :/