83096 2012-04-03 16:57:15 -0700 Linux crashes during boot 2012-04-03 17:30:03 -0700 1 1 1 Unclassified WebKit JavaScriptCore 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED http://www.ubercomp.com/jslm32/src/ P2 Normal --- 1 barraclough barraclough oldest_to_newest 595037 0 barraclough 2012-04-03 16:57:15 -0700 The bug here is that we add empty JSValues to the sparse map, and then set them - but a GC may occur before doing so (due to a call to reportExtraMemory cost). We may want to consider making it safe to mark empty JSValues, but the simple & contained fix to this specific bug is to just initialize these values to something other than JSValue(). 595039 1 135457 barraclough 2012-04-03 16:59:10 -0700 Created attachment 135457 Fix 595056 2 barraclough 2012-04-03 17:30:03 -0700 Fixed in r113112 135457 2012-04-03 16:59:10 -0700 2012-04-03 17:00:26 -0700 Fix 83096.patch text/plain 1637 barraclough SW5kZXg6IFNvdXJjZS9KYXZhU2NyaXB0Q29yZS9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkocmV2aXNpb24gMTEzMTA5KQorKysgU291cmNl L0phdmFTY3JpcHRDb3JlL0NoYW5nZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDIwIEBA CisyMDEyLTA0LTAzICBHYXZpbiBCYXJyYWNsb3VnaCAgPGJhcnJhY2xvdWdoQGFwcGxlLmNvbT4K KworICAgICAgICBMaW51eCBjcmFzaGVzIGR1cmluZyBib290CisgICAgICAgIGh0dHBzOi8vYnVn cy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD04MzA5NgorCisgICAgICAgIFJldmlld2VkIGJ5 IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFRoZSBidWcgaGVyZSBpcyB0aGF0IHdlIGFkZCBl bXB0eSBKU1ZhbHVlcyB0byB0aGUgc3BhcnNlIG1hcCwgYW5kIHRoZW4gc2V0IHRoZW0KKyAgICAg ICAgLSBidXQgYSBHQyBtYXkgb2NjdXIgYmVmb3JlIGRvaW5nIHNvIChkdWUgdG8gYSBjYWxsIHRv IHJlcG9ydEV4dHJhTWVtb3J5IGNvc3QpLgorICAgICAgICBXZSBtYXkgd2FudCB0byBjb25zaWRl ciBtYWtpbmcgaXQgc2FmZSB0byBtYXJrIGVtcHR5IEpTVmFsdWVzLCBidXQgdGhlIHNpbXBsZSAm CisgICAgICAgIGNvbnRhaW5lZCBmaXggdG8gdGhpcyBzcGVjaWZpYyBidWcgaXMgdG8ganVzdCBp bml0aWFsaXplIHRoZXNlIHZhbHVlcyB0bworICAgICAgICBzb21ldGhpbmcgb3RoZXIgdGhhbiBK U1ZhbHVlKCkuCisKKyAgICAgICAgKiBydW50aW1lL0pTQXJyYXkuY3BwOgorICAgICAgICAoSlND OjpTcGFyc2VBcnJheVZhbHVlTWFwOjphZGQpOgorICAgICAgICAgICAgLSBJbml0aWFsaXplIHNw YXJzZSBtYXAgZW50cmllcy4KKwogMjAxMi0wNC0wMiAgT2xpdmVyIEh1bnQgIDxvbGl2ZXJAYXBw bGUuY29tPgogCiAgICAgICAgIEluY29ycmVjdCBsaXZlbmVzcyBpbmZvcm1hdGlvbiB3aGVuIGlu bGluaW5nCkluZGV4OiBTb3VyY2UvSmF2YVNjcmlwdENvcmUvcnVudGltZS9KU0FycmF5LmNwcAo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBTb3VyY2UvSmF2YVNjcmlwdENvcmUvcnVudGltZS9KU0FycmF5LmNwcAko cmV2aXNpb24gMTEzMDk1KQorKysgU291cmNlL0phdmFTY3JpcHRDb3JlL3J1bnRpbWUvSlNBcnJh eS5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTE5OCw2ICsxOTgsOCBAQCB2b2lkIEpTQXJyYXk6OmZp bmFsaXplKEpTQ2VsbCogY2VsbCkKIGlubGluZSBTcGFyc2VBcnJheVZhbHVlTWFwOjpBZGRSZXN1 bHQgU3BhcnNlQXJyYXlWYWx1ZU1hcDo6YWRkKEpTQXJyYXkqIGFycmF5LCB1bnNpZ25lZCBpKQog ewogICAgIFNwYXJzZUFycmF5RW50cnkgZW50cnk7CisgICAgZW50cnkuc2V0V2l0aG91dFdyaXRl QmFycmllcihqc1VuZGVmaW5lZCgpKTsKKwogICAgIEFkZFJlc3VsdCByZXN1bHQgPSBtX21hcC5h ZGQoaSwgZW50cnkpOwogICAgIHNpemVfdCBjYXBhY2l0eSA9IG1fbWFwLmNhcGFjaXR5KCk7CiAg ICAgaWYgKGNhcGFjaXR5ICE9IG1fcmVwb3J0ZWRDYXBhY2l0eSkgewo=