<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>120639</bug_id>
          
          <creation_ts>2013-09-03 10:27:52 -0700</creation_ts>
          <short_desc>ASSERT in MarkedAllocator::allocateSlowCase is wrong</short_desc>
          <delta_ts>2013-09-04 14:01:35 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Mark Hahnenberg">mhahnenberg</reporter>
          <assigned_to name="Mark Hahnenberg">mhahnenberg</assigned_to>
          <cc>benjamin</cc>
    
    <cc>commit-queue</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>924074</commentid>
    <comment_count>0</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-09-03 10:27:52 -0700</bug_when>
    <thetext>ASSERT(!m_heap-&gt;shouldCollect()) is no longer true due to our use of the GC deferral mechanism. We could technically be beyond our byte allocation limit, but still not try to collect due to deferral. We should either amend shouldCollect to account for GC deferral or remove this ASSERT.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>924081</commentid>
    <comment_count>1</comment_count>
      <attachid>210385</attachid>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-09-03 10:39:43 -0700</bug_when>
    <thetext>Created attachment 210385
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>924539</commentid>
    <comment_count>2</comment_count>
    <who name="Mark Hahnenberg">mhahnenberg</who>
    <bug_when>2013-09-04 11:43:38 -0700</bug_when>
    <thetext>&lt;rdar://problem/14858879&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>924547</commentid>
    <comment_count>3</comment_count>
      <attachid>210385</attachid>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-09-04 12:05:27 -0700</bug_when>
    <thetext>Comment on attachment 210385
Patch

Clearing flags on attachment: 210385

Committed r155056: &lt;http://trac.webkit.org/changeset/155056&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>924548</commentid>
    <comment_count>4</comment_count>
    <who name="WebKit Commit Bot">commit-queue</who>
    <bug_when>2013-09-04 12:05:29 -0700</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>924597</commentid>
    <comment_count>5</comment_count>
    <who name="Benjamin Poulain">benjamin</who>
    <bug_when>2013-09-04 14:01:35 -0700</bug_when>
    <thetext>The debug bots started crashing. E.g.: http://build.webkit.org/results/Apple%20MountainLion%20Debug%20WK2%20(Tests)/r155055%20(12191)/results.html

It looks related to this change.
Can you please have a look?</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>210385</attachid>
            <date>2013-09-03 10:39:43 -0700</date>
            <delta_ts>2013-09-04 12:05:27 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-120639-20130903103948.patch</filename>
            <type>text/plain</type>
            <size>1564</size>
            <attacher name="Mark Hahnenberg">mhahnenberg</attacher>
            
              <data encoding="base64">SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291
cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTU0OTkwKQorKysgU291cmNl
L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBA
CisyMDEzLTA5LTAzICBNYXJrIEhhaG5lbmJlcmcgIDxtaGFobmVuYmVyZ0BhcHBsZS5jb20+CisK
KyAgICAgICAgQVNTRVJUIGluIE1hcmtlZEFsbG9jYXRvcjo6YWxsb2NhdGVTbG93Q2FzZSBpcyB3
cm9uZworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTIw
NjM5CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQVNT
RVJUKCFtX2hlYXAtPnNob3VsZENvbGxlY3QoKSkgaXMgbm8gbG9uZ2VyIHRydWUgZHVlIHRvIG91
ciB1c2Ugb2YgdGhlIEdDIAorICAgICAgICBkZWZlcnJhbCBtZWNoYW5pc20uIFdlIGNvdWxkIHRl
Y2huaWNhbGx5IGJlIGJleW9uZCBvdXIgYnl0ZSBhbGxvY2F0aW9uIGxpbWl0LCAKKyAgICAgICAg
YnV0IHN0aWxsIG5vdCB0cnkgdG8gY29sbGVjdCBkdWUgdG8gZGVmZXJyYWwuIFRoaXMgcGF0Y2gg
YW1lbmRzIHNob3VsZENvbGxlY3QoKSAKKyAgICAgICAgdG8gcmV0dXJuIGZhbHNlIGlmIEdDIGlz
IGN1cnJlbnRseSBkZWZlcnJlZC4KKworICAgICAgICAqIGhlYXAvSGVhcC5oOgorICAgICAgICAo
SlNDOjpIZWFwOjpzaG91bGRDb2xsZWN0KToKKwogMjAxMy0wOS0wMiAgRmlsaXAgUGl6bG8gIDxm
cGl6bG9AYXBwbGUuY29tPgogCiAgICAgICAgIENvZGVCbG9jazo6amV0dGlzb24oKSBzaG91bGQg
YmUgaW1wbGljaXQKSW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9oZWFwL0hlYXAuaAo9PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09Ci0tLSBTb3VyY2UvSmF2YVNjcmlwdENvcmUvaGVhcC9IZWFwLmgJKHJldmlzaW9uIDE1
NDk4OSkKKysrIFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9oZWFwL0hlYXAuaAkod29ya2luZyBjb3B5
KQpAQCAtMzA1LDYgKzMwNSw4IEBAIG5hbWVzcGFjZSBKU0MgewogCiAgICAgaW5saW5lIGJvb2wg
SGVhcDo6c2hvdWxkQ29sbGVjdCgpCiAgICAgeworICAgICAgICBpZiAoaXNEZWZlcnJlZCgpKQor
ICAgICAgICAgICAgcmV0dXJuIGZhbHNlOwogICAgICAgICBpZiAoT3B0aW9uczo6Z2NNYXhIZWFw
U2l6ZSgpKQogICAgICAgICAgICAgcmV0dXJuIG1fYnl0ZXNBbGxvY2F0ZWQgPiBPcHRpb25zOjpn
Y01heEhlYXBTaXplKCkgJiYgbV9pc1NhZmVUb0NvbGxlY3QgJiYgbV9vcGVyYXRpb25JblByb2dy
ZXNzID09IE5vT3BlcmF0aW9uOwogICAgICAgICByZXR1cm4gbV9ieXRlc0FsbG9jYXRlZCA+IG1f
Ynl0ZXNBbGxvY2F0ZWRMaW1pdCAmJiBtX2lzU2FmZVRvQ29sbGVjdCAmJiBtX29wZXJhdGlvbklu
UHJvZ3Jlc3MgPT0gTm9PcGVyYXRpb247Cg==
</data>

          </attachment>
      

    </bug>

</bugzilla>