Crash when a JSExtension has no more references

[wmingjian]

Crash when a JSExtension has no more references

[GoogleCodeExporter]

A little modification to the script:
+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0
print PyV8.JSExtension.extensions
ext1 = 123
print PyV8.JSExtension.extensions
+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0+0

We get:
['ext1/javascript', 'v8/gc']
['(]\xad\x01\xe0z8', 'v8/gc']

Original comment by [email protected] on 18 Mar 2010 at 9:49

[GoogleCodeExporter]

Original comment by [email protected] on 19 Mar 2010 at 2:27

• Changed state: Accepted

[GoogleCodeExporter]

The root cause is v8 doesn't support to deregister a extension, if you free a 
extension 
with `ext1 = 123`, v8 engine still hold a pointer with a linked list, and it 
will refer to a 
invalid memory area.

So, I use a global vector to hold every registered extensions, even you free 
the python 
object, pyv8 still help you hold it.

Please verify it with latest SVN code after r244, or use the private build in 
attachment

Original comment by [email protected] on 19 Mar 2010 at 3:10

• Changed state: Fixed
• Added labels: OpSys-All

Attachments:

• PyV8#244.zip

[GoogleCodeExporter]

Verified. Thanks a lot!

Original comment by [email protected] on 19 Mar 2010 at 6:19

[GoogleCodeExporter]

You are welcome :)

Original comment by [email protected] on 20 Mar 2010 at 1:47

• Changed state: Verified