[IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at jsgc.cpp:4217

RESOLVED FIXED

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
6 years ago
6 years ago

People

(Reporter: decoder, Assigned: billm)

Tracking

(Blocks: 1 bug, {assertion, testcase})

Other Branch
x86_64
Linux
assertion, testcase
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

6 years ago
The following test asserts on larch branch (incremental GC) revision 341396ef32a8 (options -m -n):


function startTest() {
function TestCase(n, d, e, a)
TestCase.prototype.dump = function () {};
}
function printBugNumber (num)
function toPrinted(value)
function enterFunc (funcName)
function exitFunc (funcName) {}
var lfcode = new Array();
lfcode.push("");
lfcode.push("");
lfcode.push("");
lfcode.push("this.watch('x', function () { }); x <<=  052 ;");
lfcode.push("gczeal(4);");
lfcode.push("");
lfcode.push("x = new XML();");
while (true) {
        var file = lfcode.shift(); if (file == undefined) { break; }
                loadFile(file);
}
function loadFile(lfVarx) {
        try {
                evaluate(lfVarx);
        } catch (lfVare) {}
}
(Assignee)

Comment 1

6 years ago
https://hg.mozilla.org/projects/larch/rev/591da0d755fa
Status: NEW → RESOLVED
Last Resolved: 6 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.