Skip to content

Promise rooting is not sound #15085

@jdm

Description

@jdm

The second commit in #15080 exposes a crash that involves a TrustedPromise value that has been garbage collected by the time we try to turn it into a stack root once more. The backtrace shows a nursery GC occurring, which means that our trace hooks don't get called. The promise object is nursery-allocated, I guess, which would explain why it's GCed during the minor collection.

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-content/bindingsThe DOM bindingsI-crashNo impact; the issue is one of maintainability or tidiness.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions