Closed
Bug 977860
Opened 11 years ago
Closed 11 years ago
Assertion failure: (0 == munmap(p, size)), at gc/Memory.cpp:257
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 978498
| Tracking | Status | |
|---|---|---|
| firefox30 | --- | affected |
People
(Reporter: decoder, Unassigned)
References
Details
(Keywords: assertion, testcase)
The following testcase asserts on mozilla-central revision 4cfb6c61b137 (run with --fuzzing-safe):
do {
new SharedArrayBuffer(0x1000);
} while (true);
|
Reporter | |
Updated•11 years ago
|
Blocks: 933001
status-firefox30:
--- → affected
Flags: needinfo?(sstangl)
Whiteboard: [jsbugmon:update]
|
||
Comment 1•11 years ago
|
||
munmap() is failing with ENOMEM, which is amusing.
Flags: needinfo?(sstangl)
|
||
Comment 2•11 years ago
|
||
Pages are being leaked when deallocating the buffer. The patch in bug 978498 addresses this.
It might also be that the garbage collector is not being called. The following looks stable with the patch in bug 978498:
do {
new SharedArrayBuffer(0x1000);
gc()
} while (true);
|
|
Reporter | |
Updated•11 years ago
|
Whiteboard: [jsbugmon:update] → [jsbugmon:update,ignore]
|
|
Reporter | |
Comment 3•11 years ago
|
||
JSBugMon: The testcase found in this bug no longer reproduces (tried revision d2dac18d0562).
|
|
Reporter | |
Updated•11 years ago
|
Whiteboard: [jsbugmon:update,ignore] → [jsbugmon:bisectfix]
|
|
||
Comment 4•11 years ago
|
||
Bisection isn't necessary -- it was fixed by Bug 978498 (as in Comment 2), which closed a memory leak.
|
|
Reporter | |
Comment 5•11 years ago
|
||
Thanks Sean :)
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Whiteboard: [jsbugmon:bisectfix]
You need to log in
before you can comment on or make changes to this bug.
Description
•