Last Comment Bug 708800 - [IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at jsgc.cpp:4176
: [IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(th...
Status: RESOLVED FIXED
: assertion, testcase
Product: Core
Classification: Components
Component: JavaScript Engine (show other bugs)
: Other Branch
: x86_64 Linux
: -- critical (vote)
: ---
Assigned To: Bill McCloskey (:billm)
:
:
Mentors:
Depends on:
Blocks: langfuzz
  Show dependency treegraph
 
Reported: 2011-12-08 12:54 PST by Christian Holler (:decoder)
Modified: 2011-12-08 19:18 PST (History)
3 users (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---
Has Regression Range: ---
Has STR: ---


Attachments

Description Christian Holler (:decoder) 2011-12-08 12:54:29 PST
The following test asserts on larch branch (incremental GC) revision 1827c8a8a25c (options -m -n -a):


gczeal(4);
var gTestcases = new Array();
var gTc = gTestcases.length;
function TestCase( d, e, a) {
  this.description = d;
  gTestcases[gTc++] = this;
TestCase.prototype.dump = function () {
    dump('\njstest: ' + this.path + ' ' +
         'description: ' + toPrinted(this.description) + ' ' +
         'reason: '      + toPrinted(this.reason) + '\n');
};
}
function toPrinted(value) {
    value = String(value);
  value = value.replace(/\\n/g, 'NL')
               .replace(/\n/g, 'NL')
}
function reportCompare (expected, actual, description) {
  var testcase = new TestCase( description, null);
  dump = function() {};
  for (var i = 0; i < gTestcases.length; i++) gTestcases[i].dump();
}
var actual = 'No Crash';
var expect = 'No Crash';
test();
function test()
  reportCompare(expect, actual, (function  (  )  {  }  )     );
var addexp = 0;
for ( addpow = 0; addpow < 33; addpow++ ) {
  new TestCase(  addexp );
}
test();
for (var i = 0; i < gTestcases.length; i++)  gTestcases[i].dump();
Comment 1 Bill McCloskey (:billm) 2011-12-08 19:18:02 PST
https://hg.mozilla.org/projects/larch/rev/341396ef32a8

Note You need to log in before you can comment on or make changes to this bug.