822540 - IonMonkey: "Assertion failure: !cx->compartment->activeAnalysis," with e4x and --enable-more-deterministic

Status: VERIFIED WONTFIX

(Core :: JavaScript Engine, defect)

Description

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Attachment: stack

function g() {
    y = newGlobal('')
    return function(c) {
        evalcx(c, y)
    }
}
f = g()
f("\
    x = this;\
    Object.seal(this);\
    options('allow_xml');\
");
f("x.XML");

asserts js debug shell on m-c changeset 2e70b718903a with --ion-eager at Assertion failure: !cx->compartment->activeAnalysis,

autoBisecting..

Comment 1

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

This seems to only occur with --enable-more-deterministic builds.

Comment 2

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

autoBisect shows this is probably related to the following changeset:

The first bad revision is:
changeset:   109238:a85c0f30cdfa
user:        Jan de Mooij
date:        Thu Oct 04 13:26:16 2012 +0200
summary:     Bug 797185 - Disable DVG stack search when building with --enable-more-deterministic. r=decoder

jandem, is bug 797185 as possible regressor?

Comment 3

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

I'm going to assume this only occurs with e4x, moreover we do not ship --enable-more-deterministic builds by default, so clearing NEEDINFO flag.

e4x will be obsolete soon, see bug 788293.

Comment 4

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

E4X is now history thanks to bug 788293. -> WONTFIX

Comment 5

[Gary Kwong [:gkw] [:nth10sd] (NOT official MoCo now)]

Running the testcase through the js shell now throws an error:

822540.js:4:39 Error: unknown option name 'allow_xml'. The valid names are atline, methodjit, methodjit_always, strict, typeinfer, werror and strict_mode.