Ticket #3708: Bug_1227028_Mod.diff

js/src/jit/Ion.cpp

@@ -1247 +1247 @@
 void
 IonScript::Destroy(FreeOp* fop, IonScript* script)
 {
     if (script->pendingBuilder())
         jit::FinishOffThreadBuilder(nullptr, script->pendingBuilder());
 
     script->destroyCaches();
     script->unlinkFromRuntime(fop);
+    // Frees the potential event we have set.
+    script->traceLoggerScriptEvent_ = TraceLoggerEvent();
     fop->free_(script);
 }
 
 void
 IonScript::toggleBarriers(bool enabled)
 {
     method()->togglePreBarriers(enabled);
 }

js/src/vm/TraceLogging.cpp

@@ -344 +344 @@
     *lineno_len = *colno - *lineno - 1;
     *colno_len = strlen(*colno);
 }
 
 TraceLoggerEventPayload*
 TraceLoggerThread::getOrCreateEventPayload(TraceLoggerTextId textId)
 {
     TextIdHashMap::AddPtr p = textIdPayloads.lookupForAdd(textId);
-    if (p)
+    if (p) {
+        MOZ_ASSERT(p->value()->textId() == textId); // Sanity check.
         return p->value();
+    }
 
     TraceLoggerEventPayload* payload = js_new<TraceLoggerEventPayload>(textId, (char*)nullptr);
 
     if (!textIdPayloads.add(p, textId, payload))
         return nullptr;
 
     return payload;
 }
 
 TraceLoggerEventPayload*
 TraceLoggerThread::getOrCreateEventPayload(const char* text)
 {
     PointerHashMap::AddPtr p = pointerMap.lookupForAdd((const void*)text);
-    if (p)
+    if (p) {
+        MOZ_ASSERT(p->value()->textId() < nextTextId); // Sanity check.
         return p->value();
+    }
 
     size_t len = strlen(text);
     char* str = js_pod_malloc<char>(len + 1);
     if (!str)
         return nullptr;
 
     DebugOnly<size_t> ret = JS_snprintf(str, len + 1, "%s", text);
     MOZ_ASSERT(ret == len);
@@ -412 +416 @@
 
     // Only log scripts when enabled otherwise return the global Scripts textId,
     // which will get filtered out.
     MOZ_ASSERT(traceLoggerState);
     if (!traceLoggerState->isTextIdEnabled(type))
         return getOrCreateEventPayload(type);
 
     PointerHashMap::AddPtr p = pointerMap.lookupForAdd(ptr);
-    if (p)
+    if (p) {
+        MOZ_ASSERT(p->value()->textId() < nextTextId); // Sanity check.
         return p->value();
+    }
 
     // Compute the length of the string to create.
     size_t lenFilename = strlen(filename);
     size_t lenLineno = 1;
     for (size_t i = lineno; i /= 10; lenLineno++);
     size_t lenColno = 1;
     for (size_t i = colno; i /= 10; lenColno++);
 
@@ -561 +567 @@
             entryStart.time = start;
             entryStart.textId = TraceLogger_Internal;
 
             EventEntry& entryStop = events.pushUninitialized();
             entryStop.time = rdtsc() - traceLoggerState->startupTime;
             entryStop.textId = TraceLogger_Stop;
         }
 
-        // Free all TextEvents that have no uses anymore.
+        // Remove the item in the pointerMap for which the payloads
+        // have no uses anymore
+        for (PointerHashMap::Enum e(pointerMap); !e.empty(); e.popFront()) {
+            if (e.front().value()->uses() != 0)
+                continue;
+
+            TextIdHashMap::Ptr p = textIdPayloads.lookup(e.front().value()->textId());
+            MOZ_ASSERT(p);
+            textIdPayloads.remove(p);
+
+            e.removeFront();
+        }
+
+        // Free all payloads that have no uses anymore.
         for (TextIdHashMap::Enum e(textIdPayloads); !e.empty(); e.popFront()) {
             if (e.front().value()->uses() == 0) {
                 js_delete(e.front().value());
                 e.removeFront();
             }
         }
     }
 
@@ -992 +1011 @@
     }
 }
 
 TraceLoggerEvent::~TraceLoggerEvent()
 {
     if (payload_)
         payload_->release();
 }
+
+TraceLoggerEvent&
+TraceLoggerEvent::operator=(const TraceLoggerEvent& other)
+{
+    if (hasPayload())
+        payload()->release();
+    if (other.hasPayload())
+        other.payload()->use();
+
+    payload_ = other.payload_;
+
+    return *this;
+}

js/src/vm/TraceLogging.h

@@ -105 +105 @@
 
     TraceLoggerEventPayload* payload() const {
         MOZ_ASSERT(hasPayload());
         return payload_;
     }
     bool hasPayload() const {
         return !!payload_;
     }
+
+    TraceLoggerEvent& operator=(const TraceLoggerEvent& other);
+    TraceLoggerEvent(const TraceLoggerEvent& event) = delete;
 };
 
 /**
  * An internal class holding the to-report string information, together with an
  * unique id and a useCount. Whenever this useCount reaches 0, this event
  * cannot get started/stopped anymore. Though consumers might still request the
  * to-report string information.
  */
@@ -125 +128 @@
 
   public:
     TraceLoggerEventPayload(uint32_t textId, char* string)
       : textId_(textId),
         string_(string),
         uses_(0)
     { }
 
+    ~TraceLoggerEventPayload() {
+        MOZ_ASSERT(uses_ == 0);
+    }
+
     uint32_t textId() {
         return textId_;
     }
     const char* string() {
         return string_.get();
     }
     uint32_t uses() {
         return uses_;