709629 - [IncrementalGC] Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(thing)), at jsgc.cpp:4217

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following test asserts on larch branch (incremental GC) revision 341396ef32a8 (options -m -n):


function startTest() {
function TestCase(n, d, e, a)
TestCase.prototype.dump = function () {};
}
function printBugNumber (num)
function toPrinted(value)
function enterFunc (funcName)
function exitFunc (funcName) {}
var lfcode = new Array();
lfcode.push("");
lfcode.push("");
lfcode.push("");
lfcode.push("this.watch('x', function () { }); x <<=  052 ;");
lfcode.push("gczeal(4);");
lfcode.push("");
lfcode.push("x = new XML();");
while (true) {
        var file = lfcode.shift(); if (file == undefined) { break; }
                loadFile(file);
}
function loadFile(lfVarx) {
        try {
                evaluate(lfVarx);
        } catch (lfVare) {}
}

Comment 1

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

https://hg.mozilla.org/projects/larch/rev/591da0d755fa