Closed Bug 635547 Opened 13 years ago Closed 13 years ago

"Assertion failure: compartment == rt->gcCurrentCompartment" during GC after loading an iframe hundreds of times

Categories

(Core :: XPConnect, defect)

Product:
Core
Component:
XPConnect
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 635873
Tracking Flags:
Tracking Status
blocking2.0 --- final+

People

(Reporter: jruderman, Assigned: billm)

Details

(Keywords: assertion, testcase, Whiteboard: [hardblocker][fixed-in-tracemonkey])

Attachments

(2 files)

testcase (hangs for ~15 seconds and then hits a fatal assertion)
907 bytes, text/html
Details
stack trace
20.39 KB, text/plain
Details 
1. Set dom.max_script_run_time to 0 (unlimited)
2. Load the testcase

Result:
Assertion failure: compartment == rt->gcCurrentCompartment, at js/src/jsscope.cpp:1488

Tested on 64-bit Linux. Reproducible on both mozilla-central and tm branch.
Attached file stack trace — 

    
  
blocking2.0: --- → ?

    
  
Assignee: nobody → gal
blocking2.0: ? → final+
Whiteboard: [hardblocker]

    
  
Assignee: gal → wmccloskey

    
    

    
  
Bill thinks he already fixed this on TM tip by removing this bad assert. He will verify and then close the bug.

    
    

    
  
I've checked that this doesn't happen on tm tip. It hasn't been merged over, so I just marked as fixed-in-tracemonkey.
Whiteboard: [hardblocker] → [hardblocker][fixed-in-tracemonkey]

    
    

    
  
Whats the bug # of the patch that fixes this?

    
    

    
  
This assertion was removed in:

changeset:   0c398bad4c99
user:        Bill McCloskey (:billm)
date:        Tue Feb 22 12:45:18 2011 -0800
summary:     Bug 635873 - Fix shape marking during per-compartment GCs (r=gal,a=dmandelin)

    
    

    
  
fixed-in-tracemonkey tracks patch merge status, this bug doesn't have a patch, so I think we can just dup it and the other one will be closed when we merge
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE

    
    

    
  
... and thanks bill

          You need to log in
          before you can comment on or make changes to this bug.
        






  

    
  







  

    

      
Attachment

      

      
      
      
      
    

    

      

        

          

            
General

            

              Creator: 



            

            
Created: 

            
Updated: 

            
Size: