781722 - Crash from a scratchpad's sandbox: "Assertion Failure: rt->heapState == JSRuntime::Idle"

Status: RESOLVED FIXED

(Core :: XPConnect, defect)

Description

[Thaddee Tyl [:espadrine]]

Backtrace: http://pastebin.mozilla.org/1747828

Situation: writing in the scratchpad that may have evaluated
something in the background.

I got the following message, too:
Assertion failure: rt->heapState == JSRuntime::Idle, at /home/tyl/files/cloud/fx-team/js/src/jsapi.cpp:241

Comment 1

[Thaddee Tyl [:espadrine]]

Attachment: Backtrace

Comment 2

[Bobby Holley (:bholley)]

Bill, Nick, looks like we're running into an AssertHeapIsIdle assertion while collecting compartment stats. Can you have a look at the stack and say where we're going wrong?

Comment 3

[Nicholas Nethercote [inactive]]

Attachment: Loosen over-tight assertion in JS_GetGlobalForScopeChain.

I assume it's reasonable for JS_GetGlobalForScopeChain() to be called within
a call to nsXPConnect::GetNativeOfWrapper()?  If so, the assertion is too
strong, and should be changed to AssertHeapIsIdleOrIterating().

It's possible that we'll see this same overtight assertion in other
jsapi.cpp functions that can be called within GetNativeOfWrapper().

Comment 4

[Nicholas Nethercote [inactive]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/6615f5ae4ffd

Comment 5

[Ed Morley [:emorley]]

https://hg.mozilla.org/mozilla-central/rev/6615f5ae4ffd