b5baf76f77
MicrotaskQueue associated to Context may be null after DetachGlobal, and triggering FinalizationGroup clean up on the detached context causes a crash. This CL fixes the crash by cancelling the clean up on such a context. Bug: chromium:937784 Change-Id: I57883ae0caf6c6bb35e482e441b6e09e921d9def Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1552500 Reviewed-by: Sathya Gunasekaran <gsathya@chromium.org> Reviewed-by: Ulan Degenbaev <ulan@chromium.org> Commit-Queue: Taiju Tsuiki <tzik@chromium.org> Cr-Commit-Position: refs/heads/master@{#60931} |
||
---|---|---|
.. | ||
basics.js | ||
cleanup-doesnt-iterate-all-holdings.js | ||
cleanup-from-different-realm.js | ||
cleanup-is-a-microtask.js | ||
cleanup-on-detached-realm.js | ||
cleanup-proxy-from-different-realm.js | ||
cleanupsome-after-unregister.js | ||
cleanupsome.js | ||
finalization-group-keeps-holdings-alive.js | ||
finalizationgroup-and-weakref.js | ||
finalizationgroup-scheduled-for-cleanup-multiple-times.js | ||
iterating-in-cleanup.js | ||
multiple-dirty-finalization-groups.js | ||
two-weakrefs.js | ||
undefined-holdings.js | ||
unregister-after-cleanup.js | ||
unregister-before-cleanup.js | ||
unregister-called-twice.js | ||
unregister-inside-cleanup1.js | ||
unregister-inside-cleanup2.js | ||
unregister-inside-cleanup3.js | ||
unregister-inside-cleanup4.js | ||
unregister-many.js | ||
unregister-when-cleanup-already-scheduled.js | ||
weak-cell-basics.js | ||
weakref-creation-keeps-alive.js | ||
weakref-deref-keeps-alive.js |