Closed
Bug 684796
Opened 15 years ago
Closed 15 years ago
Assertion failure: freeLists[kind].isEmpty()
Categories
(Core :: JavaScript Engine, defect)
Core
JavaScript Engine
Tracking
()
RESOLVED
FIXED
mozilla9
People
(Reporter: n.nethercote, Unassigned)
References
Details
Attachments
(1 file)
|
2.05 KB,
patch
|
bhackett1024
:
review+
|
Details | Diff | Splinter Review |
js> mjitdatastats()
Assertion failure: freeLists[kind].isEmpty(), at /home/njn/moz/mi6/js/src/jsgc.h:1081
Aborted (core dumped)
I'm guessing this is related to bug 674251.
|
Reporter | |
Comment 1•15 years ago
|
||
I should say that removing mjitstats() from the shell would be an acceptable fix for this, IMHO, because I doubt anyone uses it.
But it would be good to know what the real problem is and if it could have other bad effects.
|
|
||
Updated•15 years ago
|
|
|
||
Comment 2•15 years ago
|
||
In the bug 674251 I have used too strict assert in the gc::CellIter. The ieterator should allow for non-empty free lists synchronized with the arenas during the GC to support pseudo-GC sessions like one setup for cell enumeration.
This patch fixes that and also fixes another regression from bug 674251 where I wrongfully used gc::FINALIZE_TYPE_OBJECT, not gc::FINALIZE_SCRIPT, in the scripts enumerator.
Attachment #558460 -
Flags: review?(bhackett1024)
|
||
Updated•15 years ago
|
Attachment #558460 -
Flags: review?(bhackett1024) → review+
|
|
||
Comment 3•15 years ago
|
||
|
||
Comment 4•15 years ago
|
||
Status: NEW → RESOLVED
Closed: 15 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla9
You need to log in
before you can comment on or make changes to this bug.
Description
•