128655 2014-02-11 22:12:20 -0800 VerifyMarked functor is wrong during EdenCollections 2014-02-19 15:25:39 -0800 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified ASSIGNED InRadar P2 Normal --- 129067 1 mhahnenberg mark.lam mark.lam mhahnenberg webkit-bug-importer oldest_to_newest 979771 0 mhahnenberg 2014-02-11 22:12:20 -0800 We should think about the invariants for the MarkedBlock's BlockState. 979772 1 mhahnenberg 2014-02-11 22:14:13 -0800 To be more specific, blocks whose marks aren't cleared during an EdenCollection could potentially still be in the Allocated block state. Historically the invariant has been that all blocks after a collection are in the MarkedState. It might be the case that we can relax this invariant for EdenCollections. 979773 2 mhahnenberg 2014-02-11 22:14:49 -0800 (In reply to comment #1) > MarkedState Marked state. 982578 3 mark.lam 2014-02-19 15:24:39 -0800 This issue can be easily reproduced by applying the patch at <https://webkit.org/b/129067>, and running testapi on a 64-bit debug build. 982579 4 webkit-bug-importer 2014-02-19 15:25:39 -0800 <rdar://problem/16115197>