Assertion failure: js::CurrentThreadCanReadCompilationData(), at jsfun.h

VERIFIED FIXED in mozilla29

Status

()

--
critical
VERIFIED FIXED
5 years ago
5 years ago

People

(Reporter: gkw, Assigned: bhackett)

Tracking

(Blocks: 1 bug, {assertion, regression, testcase})

Trunk
mozilla29
x86_64
Mac OS X
assertion, regression, testcase
Points:
---
Dependency tree / graph
Bug Flags:
in-testsuite ?

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

(Reporter)

Description

5 years ago
Created attachment 8348894 [details]
lldb stack

function f(input) {
    for (var k = 0; k < 999; k++) {
        input();
    }
}
g = (function(x) {
    ff = x.ff;
    return (function() {
        ff()
    });
})({
    ff: (function() {
        'fa'.replace(/a/g, String.localeCompare)
    })
});
f(g);

asserts js debug shell on m-c changeset d58545aaeab9 with -D at Assertion failure: js::CurrentThreadCanReadCompilationData(), at jsfun.h

My configure flags are:

CC="clang -Qunused-arguments" AR=ar CXX="clang++ -Qunused-arguments" sh ./configure --target=x86_64-apple-darwin12.5.0 --enable-optimize --enable-debug --enable-profiling --enable-gczeal --enable-debug-symbols --enable-methodjit --enable-type-inference --disable-tests --with-ccache --enable-threadsafe <other NSPR options>

=== Tinderbox Build Bisection Results ===

Last "good" changeset has timestamp "20131216104657" and the hash "3df0585a23a1"
First "bad" changeset has timestamp "20131216105355" and the hash "dbeea0e93b56"

Likely regression window: http://hg.mozilla.org/integration/mozilla-inbound/pushloghtml?fromchange=3df0585a23a1&tochange=dbeea0e93b56


Regression window only has bug 785905 in it. Brian, is it a likely regressor?
Flags: needinfo?(bhackett1024)
(Assignee)

Comment 1

5 years ago
Created attachment 8350365 [details] [diff] [review]
patch
Assignee: nobody → bhackett1024
Attachment #8350365 - Flags: review?(jdemooij)
Flags: needinfo?(bhackett1024)

Updated

5 years ago
Attachment #8350365 - Flags: review?(jdemooij) → review+
https://hg.mozilla.org/mozilla-central/rev/07df5b26051d
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla29

Updated

5 years ago
Flags: in-testsuite?
Keywords: verifyme
Status: RESOLVED → VERIFIED
JSBugMon: This bug has been automatically verified fixed.

Updated

5 years ago
Keywords: verifyme
You need to log in before you can comment on or make changes to this bug.