Subj : Re: automatic variable that holds JSAtom* in JS_DefineFunction() is not GC protected.
To   : netscape.public.mozilla.jseng
From : "itaj sherman" <myngs@hotmail.com>
Date : Sun Mar 09 2003 08:55 pm


i tried the patch, and it solves this specific case, but other cases i
described in the previous post "SpiderMonkey crashes on invalid JSAtom*"
still occur.
that is: the program runs 5 threads that run the main JS script in a loop.
the main script invokes a native function that compiles and executes another
script.
there's also a GC thread that calls JS_GC() once every second.
after a short while it will crash while executing the inner script trying to
use an invalid JSAtom* read from the bytecode.
even if the inner script only defines a function and does nothing else it
crashes in js_Interpert() JSOP_DEFFUN.

i wanted to send you that testing program - i started making the changes in
the code so it works with NSPR thread API instead of our regular library. if
you need it i can finish it tomorrow and send it.

thanks
itaj

.