Bug 100504 - [BlackBerry] ASSERT currentThreadIsHoldingLock() failed in MarkedAllocator::allocateSlowCase()
Summary: [BlackBerry] ASSERT currentThreadIsHoldingLock() failed in MarkedAllocator::a...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit BlackBerry (show other bugs)
Version: 528+ (Nightly build)
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-10-26 05:02 PDT by Sean Wang
Modified: 2012-10-26 07:30 PDT (History)
5 users (show)

See Also:

Attachments
patch (2.96 KB, patch)
2012-10-26 05:28 PDT, Sean Wang 		no flags Details | Formatted Diff | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sean Wang 2012-10-26 05:02:39 PDT 
DESCRIPTION:
This is similar with a resolved bug 95492, but it has different code path.
I will make a patch in the same way.

HOW TO REPRODUCE:
1) Build debug version webkit
2) open bing.com
3) after it loaded, open baidu.com

EXPECTED:
Baidu.com is loaded and browser should not crash

ACTUAL:
Browser crashed at the assertion failure as following.

Thread [3] (Suspended: Signal 'SIGSEGV' received. Description: Segmentation
fault.)    
    22 JSC::MarkedAllocator::allocateSlowCase() MarkedAllocator.cpp:76
0x02954174    
    21 JSC::MarkedAllocator::allocate() MarkedAllocator.h:83 0x793f43e4    
    20 JSC::MarkedSpace::allocateWithDestructor() MarkedSpace.h:197 0x793f4518  
    19 JSC::Heap::allocateWithDestructor() Heap.h:366 0x793f4668    
    18 JSC::allocateCell<JSC::JSAPIValueWrapper>() JSCell.h:337 0x793ff2ac    
    17 JSC::JSAPIValueWrapper::create() JSAPIValueWrapper.h:49 0x793fb664    
    16 JSC::jsAPIValueWrapper() JSAPIValueWrapper.h:73 0x793fb814    
    15 toRef() APICast.h:114 0x793fb8a0    
    14 BlackBerry::WebKit::WebPagePrivate::executeJavaScriptInIsolatedWorld()
WebPage.cpp:860 0x793d9f08    
    13 BlackBerry::WebKit::WebPage::executeJavaScriptInIsolatedWorld()
WebPage.cpp:915 0x793da308
Comment 1 Sean Wang 2012-10-26 05:28:56 PDT 
Created attachment 170903 [details]
patch

Petter Wang had internally reviewed+. It's better to have YongLi to have a look.
Comment 2 Yong Li 2012-10-26 07:23:55 PDT 
Comment on attachment 170903 [details]
patch

r+ with more confidence when it is internally reviewed first.
Comment 3 WebKit Review Bot 2012-10-26 07:30:26 PDT 
Comment on attachment 170903 [details]
patch

Clearing flags on attachment: 170903

Committed r132653: <http://trac.webkit.org/changeset/132653>
Comment 4 WebKit Review Bot 2012-10-26 07:30:30 PDT 
All reviewed patches have been landed.  Closing bug.