Closed Bug 744356 Opened 13 years ago Closed 13 years ago

Assertion failure: IsMarkedOrAllocated(static_cast<Cell *>(*thingp)), at jsgc.cpp:4278 with generator

Categories

(Core :: JavaScript Engine, defect)

x86_64
Linux
defect
Not set
critical

Tracking

()

RESOLVED DUPLICATE of bug 744285

People

(Reporter: decoder, Assigned: billm)

References

Details

(Keywords: assertion, testcase)

The following test asserts on mozilla-central revision 3fa30b0edd15 (options -m -n): gczeal(4); function gen() { var c = [1, "x"]; try { yield c; } finally { gc(); } } var iter = gen(); for (i in iter) { (SECTION)(); } Could be a dup of bug 744287 or any of the other similar assertions, however this uses generators. Marking s-s because this assertion is GC-related.
Group: core-security
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → DUPLICATE
A testcase for this bug was automatically identified at js/src/jit-test/tests/basic/bug744356.js.
Flags: in-testsuite+
Depends on: 878611
You need to log in before you can comment on or make changes to this bug.