Assertion failure: allocated(), at ../../gc/Heap.h:497 or Crash [@ js::gc::Arena::isAligned]

RESOLVED FIXED in mozilla17

Status

()

Core
JavaScript Engine
--
critical
RESOLVED FIXED
5 years ago
5 years ago

People

(Reporter: billm, Assigned: billm)

Tracking

(Blocks: 1 bug, {assertion, crash, testcase})

Trunk
mozilla17
x86
Linux
assertion, crash, testcase
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [js:p2], crash signature)

Attachments

(1 attachment)

(Assignee)

Description

5 years ago
Created attachment 651885 [details] [diff] [review]
patch

+++ This bug was initially created as a clone of Bug #753283 +++

Somehow when fixing this bug I failed to fix the non-gcc path as well. This moves MaybeVerifyBarriers from before to after the op is done, just as was done in bug 753283.
Attachment #651885 - Flags: review?(bhackett1024)
(Assignee)

Updated

5 years ago
Assignee: general → wmccloskey
Attachment #651885 - Flags: review?(bhackett1024) → review+
(Assignee)

Comment 1

5 years ago
https://hg.mozilla.org/integration/mozilla-inbound/rev/fc50fe61fd71

Updated

5 years ago
Target Milestone: --- → mozilla17
https://hg.mozilla.org/mozilla-central/rev/fc50fe61fd71
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
(Assignee)

Updated

5 years ago
Blocks: 781393
(Assignee)

Comment 3

5 years ago
Landed this on Aurora because it was needed for bug 781393.
https://hg.mozilla.org/releases/mozilla-aurora/rev/95a9ef9dfc3d

This change only affects DEBUG builds, and it was only needed to appease some tests.
Whiteboard: [js:p2][js:ni] → [js:p2]
You need to log in before you can comment on or make changes to this bug.