Closed
Bug 757412
Opened 12 years ago
Closed 12 years ago
IonMonkey: Assertion failure: needsBarrier_, at ../../jscompartment.h:108 with ParallelArray
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
VERIFIED
FIXED
Tracking | Status | |
---|---|---|
firefox-esr10 | --- | unaffected |
People
(Reporter: decoder, Assigned: dvander)
References
Details
(Keywords: assertion, testcase, Whiteboard: [jsbugmon:update,ignore])
Attachments
(1 file)
763 bytes,
patch
|
sstangl
:
review+
|
Details | Diff | Splinter Review |
The following testcase asserts on ionmonkey revision d80602d38aa8 (run with --ion -n -m --ion-eager): function TestCase(n, d, e, a) { this.reason = ''; } function reportCompare (expected, actual, description) { var output = ""; var testcase = new TestCase("unknown-test-name", description, expected, actual); testcase.reason = output; } var status = ''; var actual = ''; var expect= ''; reportCompare(expect, actual, status); gczeal(4); var p = new ParallelArray([0,1,2,3,4]); var summary = 'Recursive Error object should not crash'; reportCompare(expect, actual, summary); evaluate("reportCompare(expect, actual, summary);");
Assignee | ||
Comment 1•12 years ago
|
||
This will be obsoleted by bug 746691, but this is a quick fix.
Comment 2•12 years ago
|
||
Comment on attachment 626279 [details] [diff] [review] fix Review of attachment 626279 [details] [diff] [review]: ----------------------------------------------------------------- ::: js/src/jscompartment.cpp @@ +106,3 @@ > mjit::ClearAllFrames(this); > +# if defined(JS_ION) > + ReleaseAllJITCode(rt->defaultFreeOp(), this, true, true); nit: uses hardtabs instead of spaces. Maybe some "vim:" line is missing from the header of this file?
Attachment #626279 -
Flags: review?(sstangl) → review+
Assignee | ||
Comment 3•12 years ago
|
||
http://hg.mozilla.org/projects/ionmonkey/rev/d5545e6d927b
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
Reporter | ||
Comment 4•12 years ago
|
||
JSBugMon: This bug has been automatically verified fixed.
Reporter | ||
Updated•12 years ago
|
Status: RESOLVED → VERIFIED
Assignee | ||
Comment 5•12 years ago
|
||
backed out as http://hg.mozilla.org/projects/ionmonkey/rev/80a444262772 this is basically a dupe of bug 746691 and rather than keep hacking around it, let's wait for that.
Status: VERIFIED → REOPENED
Resolution: FIXED → ---
Reporter | ||
Comment 6•12 years ago
|
||
JSBugMon: The testcase found in this bug no longer reproduces (tried revision 629d1e6251b9).
Reporter | ||
Comment 7•12 years ago
|
||
JSBugMon: The testcase found in this bug no longer reproduces (tried revision c76abdb11904).
Reporter | ||
Updated•12 years ago
|
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
Updated•12 years ago
|
status-firefox-esr10:
--- → unaffected
Assignee | ||
Comment 8•12 years ago
|
||
Fixed by bug 746691.
Status: REOPENED → RESOLVED
Closed: 12 years ago → 12 years ago
Resolution: --- → FIXED
Reporter | ||
Comment 9•12 years ago
|
||
JSBugMon: This bug has been automatically verified fixed.
Reporter | ||
Updated•12 years ago
|
Status: RESOLVED → VERIFIED
Updated•9 years ago
|
Group: core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•