Summary: | REGRESSION (r80598?): Assertion failure in MarkStack::internalAppend when running various regression tests | ||
---|---|---|---|
Product: | WebKit | Reporter: | Adam Roben (:aroben) <aroben> |
Component: | JavaScriptCore | Assignee: | Nobody <webkit-unassigned> |
Status: | RESOLVED FIXED | ||
Severity: | Normal | CC: | barraclough, ggaren, oliver |
Priority: | P2 | Keywords: | InRadar, LayoutTestFailure, MakingBotsRed |
Version: | 528+ (Nightly build) | ||
Hardware: | All | ||
OS: | All |
Description
Adam Roben (:aroben)
2011-03-10 09:55:03 PST
Looks like this is happening on Mac, too: http://build.webkit.org/results/SnowLeopard%20Intel%20Leaks/r80712%20(15465)/inspector/debugger/source-frame-crash-log.txt This will crash in Release builds. I wonder if this Release crash is related: http://build.webkit.org/results/SnowLeopard%20Intel%20Release%20(Tests)/r80729%20(26572)/jquery/effects-crash-log.txt Here's the failing code from the Windows crash logs:
FAULTING_SOURCE_CODE:
343:
344: ALWAYS_INLINE void MarkStack::internalAppend(JSCell* cell)
345: {
346: ASSERT(!m_isCheckingForDefaultMarkViolation);
> 347: ASSERT(cell);
348: if (Heap::testAndSetMarked(cell))
349: return;
350: if (cell->structure()->typeInfo().type() >= CompoundType)
351: m_values.append(cell);
352: }
Oliver thinks r80738 will probably have fixed this. Looks like Oliver was right! |