710933 - [IncrementalGC] Assertion failure: savedTos < gcmarker->stack.tos, at jsgcmark.cpp:810

Status: RESOLVED FIXED

(Core :: JavaScript Engine, defect)

Description

[Christian Holler (:decoder)]

The following test asserts on larch branch (incremental GC) revision 591da0d755fa (options -m -n -a):


var appendToActual = function(s) {
    actual += s + ',';
}
actual = '';
function g(a) {
  for (var i = 0; i < 3; ++i) {
    a();
  }
}
function f(y) {
  for (var i = 0; i < 7; -i) {
    q = function() { appendToActual(y); };
    g(q);
  }
}
  f("Function.prototype = null; Function.prototype");

Comment 1

[Bill McCloskey [inactive unless it's an emergency] (:billm)]

http://hg.mozilla.org/projects/larch/rev/9ff54d96a526