<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>71722</bug_id>
          
          <creation_ts>2011-11-07 12:45:20 -0800</creation_ts>
          <short_desc>Uninitialized Heap member var</short_desc>
          <delta_ts>2011-11-07 14:20:39 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>JavaScriptCore</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Andrew Wason">rectalogic</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>fpizlo</cc>
    
    <cc>kling</cc>
    
    <cc>oliver</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>497387</commentid>
    <comment_count>0</comment_count>
    <who name="Andrew Wason">rectalogic</who>
    <bug_when>2011-11-07 12:45:20 -0800</bug_when>
    <thetext>m_blockFreeingThreadShouldQuit is uninitialized in Source/JavaScriptCore/heap/Heap.cpp

valgrind complains:

==24728== Thread 3:
==24728== Conditional jump or move depends on uninitialised value(s)
==24728==    at 0x6923EF7: JSC::Heap::blockFreeingThreadMain() (Heap.cpp:411)
==24728==    by 0x6923D7B: JSC::Heap::blockFreeingThreadStartFunc(void*) (Heap.cpp:405)
==24728==    by 0x68FF7BC: WTF::threadEntryPoint(void*) (Threading.cpp:67)
==24728==    by 0x68F8618: WTF::ThreadPrivate::run() (ThreadingQt.cpp:67)
==24728==    by 0x91C3FF4: QThreadPrivate::start(void*) (qthread_unix.cpp:331)
==24728==    by 0x96A19C9: start_thread (pthread_create.c:300)
==24728==    by 0xA14C70C: clone (clone.S:112)
==24728== 
==24728== Conditional jump or move depends on uninitialised value(s)
==24728==    at 0x6923CBE: JSC::Heap::waitForRelativeTimeWhileHoldingLock(double) (Heap.cpp:388)
==24728==    by 0x6923D2E: JSC::Heap::waitForRelativeTime(double) (Heap.cpp:400)
==24728==    by 0x6923DAB: JSC::Heap::blockFreeingThreadMain() (Heap.cpp:414)
==24728==    by 0x6923D7B: JSC::Heap::blockFreeingThreadStartFunc(void*) (Heap.cpp:405)
==24728==    by 0x68FF7BC: WTF::threadEntryPoint(void*) (Threading.cpp:67)
==24728==    by 0x68F8618: WTF::ThreadPrivate::run() (ThreadingQt.cpp:67)
==24728==    by 0x91C3FF4: QThreadPrivate::start(void*) (qthread_unix.cpp:331)
==24728==    by 0x96A19C9: start_thread (pthread_create.c:300)
==24728==    by 0xA14C70C: clone (clone.S:112)
==24728== 
==24728== Conditional jump or move depends on uninitialised value(s)
==24728==    at 0x6923DB9: JSC::Heap::blockFreeingThreadMain() (Heap.cpp:415)
==24728==    by 0x6923D7B: JSC::Heap::blockFreeingThreadStartFunc(void*) (Heap.cpp:405)
==24728==    by 0x68FF7BC: WTF::threadEntryPoint(void*) (Threading.cpp:67)
==24728==    by 0x68F8618: WTF::ThreadPrivate::run() (ThreadingQt.cpp:67)
==24728==    by 0x91C3FF4: QThreadPrivate::start(void*) (qthread_unix.cpp:331)
==24728==    by 0x96A19C9: start_thread (pthread_create.c:300)
==24728==    by 0xA14C70C: clone (clone.S:112)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>497397</commentid>
    <comment_count>1</comment_count>
      <attachid>113915</attachid>
    <who name="Andrew Wason">rectalogic</who>
    <bug_when>2011-11-07 12:56:10 -0800</bug_when>
    <thetext>Created attachment 113915
initialize m_blockFreeingThreadShouldQuit</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>497422</commentid>
    <comment_count>2</comment_count>
      <attachid>113915</attachid>
    <who name="Filip Pizlo">fpizlo</who>
    <bug_when>2011-11-07 13:21:19 -0800</bug_when>
    <thetext>Comment on attachment 113915
initialize m_blockFreeingThreadShouldQuit

Ooops!  It&apos;s a wonder that this code has &quot;worked&quot; for so long.  Thanks for the fix!  r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>497425</commentid>
    <comment_count>3</comment_count>
    <who name="Oliver Hunt">oliver</who>
    <bug_when>2011-11-07 13:26:51 -0800</bug_when>
    <thetext>&lt;rdar://problem/10407863&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>497467</commentid>
    <comment_count>4</comment_count>
      <attachid>113915</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-11-07 14:20:34 -0800</bug_when>
    <thetext>Comment on attachment 113915
initialize m_blockFreeingThreadShouldQuit

Clearing flags on attachment: 113915

Committed r99477: &lt;http://trac.webkit.org/changeset/99477&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>497468</commentid>
    <comment_count>5</comment_count>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2011-11-07 14:20:39 -0800</bug_when>
    <thetext>All reviewed patches have been landed.  Closing bug.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>113915</attachid>
            <date>2011-11-07 12:56:10 -0800</date>
            <delta_ts>2011-11-07 14:20:34 -0800</delta_ts>
            <desc>initialize m_blockFreeingThreadShouldQuit</desc>
            <filename>heapinit.diff</filename>
            <type>text/plain</type>
            <size>1118</size>
            <attacher name="Andrew Wason">rectalogic</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cgYi9Tb3VyY2UvSmF2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</data>

          </attachment>
      

    </bug>

</bugzilla>