Bug 63812

Summary: REGRESSION (r90194): Multiple tests intermittently failing assertions in WriteBarrierBase<JSC::Structure>::get
Product: WebKit Reporter: Adam Roben (:aroben) <aroben>
Component: JavaScriptCoreAssignee: Nobody <webkit-unassigned>
Status: RESOLVED FIXED    
Severity: Normal CC: bdakin, ggaren, oliver, webkit.review.bot
Priority: P2 Keywords: LayoutTestFailure, MakingBotsRed, Regression
Version: 528+ (Nightly build)   
Hardware: All   
OS: All   

Description Adam Roben (:aroben) 2011-07-01 09:07:46 PDT
Multiple tests have been intermittently failing assertions in WriteBarrierBase<JSC::Structure>::get since r90194 <http://trac.webkit.org/changeset/90194>. Some examples:

inspector/console/console-dir.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90226%20(30240)/inspector/console/console-dir-crash-log.txt

fast/dom/Window/window-function-frame-getter-precedence.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/fast/dom/Window/window-function-frame-getter-precedence-crash-log.txt
http://build.webkit.org/results/SnowLeopard%20Intel%20Leaks/r90198%20(17812)/fast/dom/Window/window-function-frame-getter-precedence-crash-log.txt

fast/js/kde/eval.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/fast/js/kde/eval-crash-log.txt

fast/regex/pcre-test-4.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90209%20(30229)/fast/regex/pcre-test-4-crash-log.txt

http/tests/inspector/network/network-open-load-reopen.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/http/tests/inspector/network/network-open-load-reopen-crash-log.txt

http/tests/inspector/resource-har-conversion.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/http/tests/inspector/resource-har-conversion-crash-log.txt

http/tests/security/contentSecurityPolicy/style-allowed.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90207%20(30228)/http/tests/security/contentSecurityPolicy/style-allowed-crash-log.txt

http/tests/security/javascriptURL/xss-ALLOWED-from-javascript-url-sub-frame-2-level.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90209%20(30229)/http/tests/security/javascriptURL/xss-ALLOWED-from-javascript-url-sub-frame-2-level-crash-log.txt

inspector/console/console-clear.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90198%20(30223)/inspector/console/console-clear-crash-log.txt

inspector/console/console-eval-syntax-error.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/inspector/console/console-eval-syntax-error-crash-log.txt

inspector/console/console-trace.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90207%20(30228)/inspector/console/console-trace-crash-log.txt

inspector/cookie-resource-match.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90201%20(30226)/inspector/cookie-resource-match-crash-log.txt

inspector/evaluate-in-page.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/inspector/evaluate-in-page-crash-log.txt

inspector/inspected-objects-not-overriden.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/inspector/inspected-objects-not-overriden-crash-log.txt

svg/css/path-gradient-stroke-shadow.svg
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90222%20(30236)/svg/css/path-gradient-stroke-shadow-crash-log.txt
Comment 1 Adam Roben (:aroben) 2011-07-01 09:40:39 PDT
*** Bug 63813 has been marked as a duplicate of this bug. ***
Comment 2 Adam Roben (:aroben) 2011-07-01 09:57:38 PDT
Committed r90241: <http://trac.webkit.org/changeset/90241>