Closed Bug 709629 Opened 13 years ago Closed 13 years ago

[IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at jsgc.cpp:4217

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Version:
Other Branch
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: decoder, Assigned: billm)

Details

(Keywords: assertion, testcase) 

The following test asserts on larch branch (incremental GC) revision 341396ef32a8 (options -m -n):


function startTest() {
function TestCase(n, d, e, a)
TestCase.prototype.dump = function () {};
}
function printBugNumber (num)
function toPrinted(value)
function enterFunc (funcName)
function exitFunc (funcName) {}
var lfcode = new Array();
lfcode.push("");
lfcode.push("");
lfcode.push("");
lfcode.push("this.watch('x', function () { }); x <<=  052 ;");
lfcode.push("gczeal(4);");
lfcode.push("");
lfcode.push("x = new XML();");
while (true) {
        var file = lfcode.shift(); if (file == undefined) { break; }
                loadFile(file);
}
function loadFile(lfVarx) {
        try {
                evaluate(lfVarx);
        } catch (lfVare) {}
}
https://hg.mozilla.org/projects/larch/rev/591da0d755fa
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.