[IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at jsgc.cpp:4176

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: decoder, Assigned: billm)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Other Branch
x86_64
Linux
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

6 years ago
The following test asserts on larch branch (incremental GC) revision 1827c8a8a25c (options -m -n -a):


gczeal(4);
var gTestcases = new Array();
var gTc = gTestcases.length;
function TestCase( d, e, a) {
  this.description = d;
  gTestcases[gTc++] = this;
TestCase.prototype.dump = function () {
    dump('\njstest: ' + this.path + ' ' +
         'description: ' + toPrinted(this.description) + ' ' +
         'reason: '      + toPrinted(this.reason) + '\n');
};
}
function toPrinted(value) {
    value = String(value);
  value = value.replace(/\\n/g, 'NL')
               .replace(/\n/g, 'NL')
}
function reportCompare (expected, actual, description) {
  var testcase = new TestCase( description, null);
  dump = function() {};
  for (var i = 0; i < gTestcases.length; i++) gTestcases[i].dump();
}
var actual = 'No Crash';
var expect = 'No Crash';
test();
function test()
  reportCompare(expect, actual, (function  (  )  {  }  )     );
var addexp = 0;
for ( addpow = 0; addpow < 33; addpow++ ) {
  new TestCase(  addexp );
}
test();
for (var i = 0; i < gTestcases.length; i++)  gTestcases[i].dump();
(Assignee)

Comment 1

6 years ago
https://hg.mozilla.org/projects/larch/rev/341396ef32a8
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.