Bug 128655
| Summary: | VerifyMarked functor is wrong during EdenCollections | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Mark Hahnenberg <mhahnenberg> |
| Component: | JavaScriptCore | Assignee: | Mark Lam <mark.lam> |
| Status: | ASSIGNED | ||
| Severity: | Normal | CC: | mark.lam, mhahnenberg, webkit-bug-importer |
| Priority: | P2 | Keywords: | InRadar |
| Version: | 528+ (Nightly build) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Bug Depends on: | |||
| Bug Blocks: | 129067 | ||
Mark Hahnenberg
We should think about the invariants for the MarkedBlock's BlockState.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
Mark Hahnenberg
To be more specific, blocks whose marks aren't cleared during an EdenCollection could potentially still be in the Allocated block state. Historically the invariant has been that all blocks after a collection are in the MarkedState. It might be the case that we can relax this invariant for EdenCollections.
Mark Hahnenberg
(In reply to comment #1)
> MarkedState
Marked state.
Mark Lam
This issue can be easily reproduced by applying the patch at <https://webkit.org/b/129067>, and running testapi on a 64-bit debug build.
Radar WebKit Bug Importer
<rdar://problem/16115197>