Closed Bug 616125 Opened 14 years ago Closed 13 years ago

E4X uses a non-RC write barrier to overwrite a field holding an RCObject

Categories

(Tamarin Graveyard :: Garbage Collection (mmGC), defect, P1)

defect

Tracking

(Not tracked)

VERIFIED FIXED
Q3 11 - Serrano

People

(Reporter: treilly, Unassigned)

References

Details

(Whiteboard: WE 2782377)

Attachments

(3 files)

Attached patch clear itSplinter Review
need to clear with a RC write barrier first
Attachment #494710 - Flags: review?(lhansen)
Blocks: 525875
Assignee: nobody → treilly
Status: NEW → ASSIGNED
Comment on attachment 494710 [details] [diff] [review]
clear it

(Ravings about awful hacks mostly elided.)
Attachment #494710 - Flags: review?(lhansen) → review+
The idea of a template, ie:

GCMember<Stringp, E4XNodeAux> m_nameOrAux;

has come up before.  Which would take care of all these details under the covers (including any bit twiddling).
http://hg.mozilla.org/tamarin-redux/rev/d7ab3108d0fc
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Flags: flashplayer-bug+
WE #2782377 surfaced it up.
Attachment #526797 - Flags: superreview?(lhansen)
Attachment #526797 - Flags: review?(treilly)
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Attachment #526797 - Flags: review?(treilly) → review+
Comment on attachment 526797 [details] [diff] [review]
One more place needs WBRC_NULL

We should expedite work on Tommy's idea for a structured way of dealing with these kinds of unions.
Attachment #526797 - Flags: superreview?(lhansen) → superreview+
http://hg.mozilla.org/tamarin-redux/rev/de2739a7f6f6
Status: REOPENED → RESOLVED
Closed: 14 years ago13 years ago
Resolution: --- → FIXED
Whiteboard: WE 2782377
Re-opening, need acceptance tests that hit setNotification
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Assignee: treilly → nobody
Flags: in-testsuite-
I set the in-testsuite flag to  a "-", reopened and reset assignee to default.  Hoping qe picks this up...
Attached patch testcaseSplinter Review
confirmed that with tr rev 6202 this testcase causes an assert to be thrown, and with 6203 it executes properly.
Attachment #528308 - Flags: review?(treilly)
Attachment #528308 - Flags: review?(treilly) → review+
changeset: 6214:eeb68bddb214
user:      Brent Baker <brbaker@adobe.com>
summary:   Bug 616125: add testing around XML.setNotification() (r=treilly)

http://hg.mozilla.org/tamarin-redux/rev/eeb68bddb214
Status: REOPENED → RESOLVED
Closed: 13 years ago13 years ago
Resolution: --- → FIXED
Status: RESOLVED → VERIFIED
Flags: in-testsuite- → in-testsuite+
changeset: 6224:60f2e1775c0e
user:      Brent Baker <brbaker@adobe.com>
summary:   Bug 616125: skip testcase when recompiled with -ES

http://hg.mozilla.org/tamarin-redux/rev/60f2e1775c0e
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: