[Webkit-unassigned] [Bug 155411] New: REGRESSION: ASSERTION FAILED: !m_lastActiveBlock on js/function-apply.html

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=155411

            Bug ID: 155411
           Summary: REGRESSION: ASSERTION FAILED: !m_lastActiveBlock on
                    js/function-apply.html
    Classification: Unclassified
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: Regression
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: ap at webkit.org
                CC: fpizlo at apple.com, oliver at apple.com,
                    ryanhaddad at apple.com

js/function-apply.html has started to sometimes assert around March 9. It's not frequent enough to pinpoint the exact revision, but it seems to be frequent enough to confuse EWS (see bug 155388).

Perhaps bug 155178?

ASSERTION FAILED: !m_lastActiveBlock
/Volumes/Data/slave/yosemite-debug/build/Source/JavaScriptCore/heap/MarkedAllocator.h(131) : void JSC::MarkedAllocator::stopAllocating()
1   0x108805030 WTFCrash
2   0x108446e1a JSC::MarkedAllocator::stopAllocating()
3   0x108446dc9 JSC::StopAllocatingFunctor::operator()(JSC::MarkedAllocator&)
4   0x108446d86 void JSC::MarkedSpace::forEachAllocator<JSC::StopAllocatingFunctor>(JSC::StopAllocatingFunctor&)
5   0x108445bd9 void JSC::MarkedSpace::forEachAllocator<JSC::StopAllocatingFunctor>()
6   0x108444c8c JSC::MarkedSpace::stopAllocating()
7   0x10844558c JSC::MarkedSpace::willStartIterating()
8   0x108107a6c JSC::Heap::willStartIterating()
9   0x107bef0d3 JSC::HeapIterationScope::HeapIterationScope(JSC::Heap&)
10  0x107bdf40d JSC::HeapIterationScope::HeapIterationScope(JSC::Heap&)
11  0x108109085 JSC::Heap::removeDeadHeapSnapshotNodes(JSC::HeapProfiler&)
12  0x10810a279 JSC::Heap::collectImpl(JSC::HeapOperation, void*, void*, int (&) [37])
13  0x108109c4d JSC::Heap::collect(JSC::HeapOperation)
14  0x107fe0805 JSC::EdenGCActivityCallback::doCollection()
15  0x1080f8620 JSC::GCActivityCallback::doWork()
16  0x1081248cf JSC::HeapTimer::timerDidFire(__CFRunLoopTimer*, void*)
17  0x7fff8ade12e4 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160313/f006a3c8/attachment.html>