Bug 53061 – REGRESSION: Leak in JSParser::Scope::copyCapturedVariablesToVector()

• Component: JavaScriptCore
• Status: RESOLVED FIXED

[Simon Fraser (smfr)]

Running 'leaks' on DumpRenderTree for some CSS tests is showing lots of leaks in:


	| WebCore::JSMainThreadExecState::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::SourceCode const&, JSC::JSValue)
	| JSC::evaluate(JSC::ExecState*, JSC::ScopeChain&, JSC::SourceCode const&, JSC::JSValue)
	| JSC::ProgramExecutable::compile(JSC::ExecState*, JSC::ScopeChainNode*)
	| JSC::ProgramExecutable::compileInternal(JSC::ExecState*, JSC::ScopeChainNode*)
	| WTF::PassRefPtr<JSC::ProgramNode> JSC::Parser::parse<JSC::ProgramNode>(JSC::JSGlobalObject*, JSC::Debugger*, JSC::ExecState*, JSC::SourceCode const&, JSC::FunctionParameters*, JSC::JSParserStrictness, JSC::JSObject**)
	| JSC::Parser::parse(JSC::JSGlobalData*, JSC::FunctionParameters*, JSC::JSParserStrictness, JSC::JSParserMode, int*, JSC::UString*)
	| JSC::jsParse(JSC::JSGlobalData*, JSC::FunctionParameters*, JSC::JSParserStrictness, JSC::JSParserMode, JSC::SourceCode const*)
	| JSC::JSParser::parseProgram()
	| JSC::ASTBuilder::SourceElements JSC::JSParser::parseSourceElements<(JSC::JSParser::SourceElementsMode)0, JSC::ASTBuilder>(JSC::ASTBuilder&)
	| JSC::ASTBuilder::Statement JSC::JSParser::parseStatement<JSC::ASTBuilder>(JSC::ASTBuilder&, JSC::Identifier const*&)
	| JSC::ASTBuilder::Statement JSC::JSParser::parseFunctionDeclaration<JSC::ASTBuilder>(JSC::ASTBuilder&)
	| bool JSC::JSParser::parseFunctionInfo<(JSC::JSParser::FunctionRequirements)1, true, JSC::ASTBuilder>(JSC::ASTBuilder&, JSC::Identifier const*&, JSC::ASTBuilder::FormalParameterList&, JSC::ASTBuilder::FunctionBody&, int&, int&, int&)
	| JSC::JSParser::Scope::saveFunctionInfo(JSC::JSParser::CachedFunctionInfo*)
	| JSC::JSParser::Scope::copyCapturedVariablesToVector(WTF::HashSet<WTF::RefPtr<WTF::StringImpl>, JSC::IdentifierRepHash, WTF::HashTraits<WTF::RefPtr<WTF::StringImpl> > > const&, WTF::Vector<WTF::RefPtr<WTF::StringImpl>, 0ul>&)
	| WTF::Vector<WTF::RefPtr<WTF::StringImpl>, 0ul>::shrinkToFit()
	| WTF::Vector<WTF::RefPtr<WTF::StringImpl>, 0ul>::shrinkCapacity(unsigned long)
	| WTF::VectorBufferBase<WTF::RefPtr<WTF::StringImpl> >::allocateBuffer(unsigned long)
	| WTF::fastMalloc(unsigned long)

[Simon Fraser (smfr)]

<rdar://problem/8911590>

[Simon Fraser (smfr)]

On SnowLeopard, at r76568.

[Simon Fraser (smfr)]

Regressed in http://trac.webkit.org/changeset/76177.

[Antti Koivisto]

Created attachment 80069 [details]
patch

Cache did not know about the subclass so failed to fully delete the items. Got rid of the subclass and moved the classes to separate files.

[WebKit Review Bot]

Attachment 80069 [details] did not pass style-queue:

Failed to run "['Tools/Scripts/check-webkit-style', '--diff-files', u'Source/JavaScriptCore/ChangeLog', u'Source..." exit_code: 1

Source/JavaScriptCore/parser/SourceProviderCache.h:39:  The parameter name "item" adds no information, so it should be removed.  [readability/parameter_name] [5]
Source/JavaScriptCore/parser/SourceProvider.h:33:  Alphabetical sorting problem.  [build/include_order] [4]
Total errors found: 2 in 11 files


If any of these errors are false positives, please file a bug against check-webkit-style.

[WebKit Review Bot]

Attachment 80069 [details] did not build on gtk:
Build output: http://queues.webkit.org/results/7513332

[Early Warning System Bot]

Attachment 80069 [details] did not build on qt:
Build output: http://queues.webkit.org/results/7493340

[Build Bot]

Attachment 80069 [details] did not build on win:
Build output: http://queues.webkit.org/results/7507325

[Antti Koivisto]

http://trac.webkit.org/changeset/76611 

(with some non-mac build fixes)

[WebKit Review Bot]

http://trac.webkit.org/changeset/76611 might have broken Windows Release (Build) and Windows Debug (Build)