Closed
Bug 967940
Opened 10 years ago
Closed 9 years ago
TSan: data race js/src/../../js/src/vm/Shape.h:1170 maybeSlot
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: decoder, Unassigned)
References
(Blocks 1 open bug)
Details
(Whiteboard: [tsan])
Attachments
(1 file)
8.96 KB,
text/plain
|
Details |
The attached logfile shows a thread/data race (mozilla-central revision 44ba69cacd7e) detected by TSan (ThreadSanitizer). Typically, races reported by TSan are not false positives, but it is possible that the race is benign. Even in this case though, we should try to come up with a fix unless this would cause inacceptable performance issues. Also note that seemingly benign races can possibly be harmful (also depending on the compiler and the architecture) [1]. If the bug cannot be fixed, then this bug should be used to either make a compile-time annotation for blacklisting or add an entry to the runtime blacklist. [1] http://software.intel.com/en-us/blogs/2013/01/06/benign-data-races-what-could-possibly-go-wrong
Comment 1•10 years ago
|
||
Shape::maybeSlot() has: // Note: Reading a shape's slot off thread can race against main thread // updates to the number of linear searches on the shape, which is // stored in the same slotInfo field. We tolerate this. AutoThreadSafeAccess ts(this);
Assignee | ||
Updated•10 years ago
|
Assignee: general → nobody
Comment 2•9 years ago
|
||
Haven't seen this one recently; please file a new bug if it turns up again.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → INCOMPLETE
You need to log in
before you can comment on or make changes to this bug.
Description
•