Bug 42383 – ASSERTION FAILED: m_freePtr <= m_end (./JavaScriptCore/jit/ExecutableAllocator.h:105 void* JSC::ExecutablePool::alloc(size_t))

• Status: RESOLVED
• Resolution: INVALID
• Component: JavaScriptCore

Created attachment 61673 [details]
The GDB backtrace

Hello,

Webkit suddenly began to crash out of the sudden with the following message (debug build):

ASSERTION FAILED: m_freePtr <= m_end
(./JavaScriptCore/jit/ExecutableAllocator.h:105 void* JSC::ExecutablePool::alloc(size_t))

A full gdb backtrace is attached. System is a Linux 2.6.34 64-bit kernel.

[Oliver Hunt]

Do you any steps to repro?

(In reply to comment #1)
> Do you any steps to repro?

Sadly not - It just began to crash immediatly when i opened any webkit browser and it happens more random (once it began to crash, it crashes all the time - Once rebooting helped). I am sorry that I can't provide more information.

[Gavin Barraclough]

I think I vaguely recall a bug like this being fixed.  The problem related to how we returned unused executable space back to the allocator.

This ASSERT no longer exists, and the ExecutableAllocator has been completely rewritten, so I think it's probably pretty safe to say this has been fixed (or, at least, doesn't exist any more).  If you are still seeing issues in a recent WebKit, please reopen & attach a new backtrace.

Guessing the closest resolution for "this code no longer exists" is INVALID. :-)