Bug 63812 – REGRESSION (r90194): Multiple tests intermittently failing assertions in WriteBarrierBase<JSC::Structure>::get

• Component: JavaScriptCore
• Status: RESOLVED FIXED

[Adam Roben (:aroben)]

Multiple tests have been intermittently failing assertions in WriteBarrierBase<JSC::Structure>::get since r90194 <http://trac.webkit.org/changeset/90194>. Some examples:

inspector/console/console-dir.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90226%20(30240)/inspector/console/console-dir-crash-log.txt

fast/dom/Window/window-function-frame-getter-precedence.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/fast/dom/Window/window-function-frame-getter-precedence-crash-log.txt
http://build.webkit.org/results/SnowLeopard%20Intel%20Leaks/r90198%20(17812)/fast/dom/Window/window-function-frame-getter-precedence-crash-log.txt

fast/js/kde/eval.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/fast/js/kde/eval-crash-log.txt

fast/regex/pcre-test-4.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90209%20(30229)/fast/regex/pcre-test-4-crash-log.txt

http/tests/inspector/network/network-open-load-reopen.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/http/tests/inspector/network/network-open-load-reopen-crash-log.txt

http/tests/inspector/resource-har-conversion.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/http/tests/inspector/resource-har-conversion-crash-log.txt

http/tests/security/contentSecurityPolicy/style-allowed.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90207%20(30228)/http/tests/security/contentSecurityPolicy/style-allowed-crash-log.txt

http/tests/security/javascriptURL/xss-ALLOWED-from-javascript-url-sub-frame-2-level.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90209%20(30229)/http/tests/security/javascriptURL/xss-ALLOWED-from-javascript-url-sub-frame-2-level-crash-log.txt

inspector/console/console-clear.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90198%20(30223)/inspector/console/console-clear-crash-log.txt

inspector/console/console-eval-syntax-error.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/inspector/console/console-eval-syntax-error-crash-log.txt

inspector/console/console-trace.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90207%20(30228)/inspector/console/console-trace-crash-log.txt

inspector/cookie-resource-match.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90201%20(30226)/inspector/cookie-resource-match-crash-log.txt

inspector/evaluate-in-page.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90194%20(30221)/inspector/evaluate-in-page-crash-log.txt

inspector/inspected-objects-not-overriden.html
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90196%20(30225)/inspector/inspected-objects-not-overriden-crash-log.txt

svg/css/path-gradient-stroke-shadow.svg
http://build.webkit.org/results/Windows%20XP%20Debug%20(Tests)/r90222%20(30236)/svg/css/path-gradient-stroke-shadow-crash-log.txt

[Adam Roben (:aroben)]

*** Bug 63813 has been marked as a duplicate of this bug. ***

[Adam Roben (:aroben)]

Committed r90241: <http://trac.webkit.org/changeset/90241>