[Webkit-unassigned] [Bug 90957] [Qt] There are GC related crashes regularly

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90957





--- Comment #10 from Zoltan Herczeg <zherczeg at webkit.org>  2012-07-24 03:39:25 PST ---
Looks like various threads overwrites each other "segments".

void MarkStackArray::expand()
{
    ...

    unsigned count = 0;
    for (MarkStackSegment* current = m_topSegment->m_previous; current; current = current->m_previous)
         count++;
    if (count != m_numberOfPreviousSegments) {
        printf("nums: %d %d\n", count, (int)m_numberOfPreviousSegments);

        sleep(1);
        count = 0;
        for (MarkStackSegment* current = m_topSegment->m_previous; current; current = current->m_previous)
             count++;
        printf("nums: %d %d\n", count, (int)m_numberOfPreviousSegments);
    }
}

It prints:

nums: 14 40
nums: 102 40

-> During the sleep(1), something overwrote the segment chain. And the length of the chain is not 40, which is expected.

I suspect this is not allowed.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.