[Webkit-unassigned] [Bug 25932] Unitialized variable used at JSC::Heap::markConservatively and JSC::CollectorBitmap::set

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri May 22 06:51:26 PDT 2009


https://bugs.webkit.org/show_bug.cgi?id=25932





------- Comment #2 from webkit at dpinol.com  2009-05-22 06:51 PDT -------
(In reply to comment #1)
> A conservative garbage collector inherently depends on reading memory that may
> not have been explicitly initialized.
> 

Exceuse my ignorance, but I can't imagine any single application where it makes
sense to read a memory address which has not been initialized.

Any way, I forgot 2 things:
1) You can reproduce this with WebKit-r43887/WebKit/qt/tests/qwebpage> valgrind
--track-origins=yes
./tst_qwebpage
2) I'm using the QtWebKit version which comes with qt 4.5. Looking at 528+
nightly build the unitialized variable is used at line 569 of
JavaScriptCore/runtime/Collector.cpp, which is the last line of this code
section
while (p != e) {
        char* x = *p++;
        if (IS_HALF_CELL_ALIGNED(x) && x) {

thanks


-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.



More information about the webkit-unassigned mailing list