The best time to catch bugs is before they make it into a nightly build, so we’ve been working hard on infrastructure to help us detect defects as early as possible. Our most-used tool, tinderbox, has been augmented with much-improved regression testing functionality.

We now execute extensive tests after every checkin, usually more than 50 thousand or so. We’re being very inclusive about it as well, so we’ve added tests from JavaScript libraries like prototype.js. This is really handy when we’re working on touchy functions like setTimeout—the script.aculo.us tests caught a bug in one of my patches today. We’ve always had the most complete JavaScript test suite, and we’re getting closer to that ideal in the rest of the browser. Problems with bidi diacritics? Never again.

Testing can cover more than correctness, though. We now have more performance coverage than ever. We can see that our switch to Quartz on Mac OS X has improved our SVG performance quite a bit. We can see areas where our JS implementation is pretty darn fast, and we can also see areas that we need to improve.

One of the best parts of our new performance testing infrastructure is the Talos framework. We use it for a variety of synthetic benchmarks, and we also test against reference copies of popular websites. It turns out that Asian pages that look sort of like yahoo.com comprise a large proportion of those, at least accoding to the big ratings agencies. We’ve also been able to pinpoint systemic performance issues in our infrastructure with these tools. Some of them have short term fixes, some long term, but it’s only going to get better.

Leaks

One of the trickiest problems in browser engineering is integrating memory management schemes across languages. Usually, there is a host language, such as C++, C, or Objective-C, and JavaScript. In many circumstances, the host language is reference counted, while the JavaScript implementation is garbage collected (GC).

For Firefox 4, we’re moving towards GC for all but the most performance-sensitive pieces of code, using high performance code donated to the Mozilla project by Adobe/Macromedia. For Firefox 3, we’ll use a cycle collector to improve our memory management in comparison to Firefox 2.

We’re also increasing our level of automated defect detection in this area. Jesse Ruderman has been developing ever more advanced fuzzers for leak and security testing. His stuff is getting really scary. We’re also parallelizing leak testing by running leak check scripts on Amazon EC2. EC2 lets us run many parallel leak checking machines against a randomly generated selection of websites. This is great, because we find problems in pages that testers and engineers probably wouldn’t look at. For instance, www.golfballoutlet.com no longer leaks.

Whodunnit

The best part about this project is that so many people have helped. To be sure, there are contributors that dwarf the rest of us, but I think everyone who’s deeply involved in the project knows who they are. I’m more interested in the long tail of bugs assigned to people I’ve never met. Just today, Malcom Parsons fixed a table damage area bug. I don’t know Malcom, and I only have the foggiest idea of what a table damage area is (though if I need to know more, I can jump on irc and find out).

Epilogue

Lastly, I’m positive you’re interested in what I’ve been up to (yeah, yeah). Mostly I’ve been putting a lot of time into busting leaks and other performance issues. But, I do have a pet bug that’s a performance issue for a few pieces of our code, and probably lots of websites: native JSON support. This will help with the security issues that have faced JSON parsing in JS, and speed up object serialization considerably.

We can simplify this type of thing with generators and array comprehensions.

Start XPCShell with a -v 170 argument to turn on JS 1.7.

~/firefox/mozilla/fb-debug/dist/bin> ./xpcshell -v 170
…
js> const Ci = Components.interfaces;
js> const Cc = Components.classes;
js> /** Create a generator function to wrap the enumerator interface **/
js> function dirIter(dir) {
      var enum = dir.directoryEntries;
      while (enum.hasMoreElements()) {
        var file = enum.getNext();
        yield file.QueryInterface(Ci.nsILocalFile);
      }
    }
js> /** Create an nsILocalFile and set the path to my home directory **/
js> var d = Cc["@mozilla.org/file/local;1"].createInstance(Ci.nsILocalFile);
js> d.initWithPath("/Users/sayrer/");
js> /** Use our generator function and an array comprehension to get a list of the paths **/
js> var paths = [f.path for (f in dirIter(d))];
js> print(paths.join("\n"));
/Users/sayrer/.bash-profile
/Users/sayrer/.bash_history
/Users/sayrer/.emacs
…
/Users/sayrer/bin
/Users/sayrer/bonecho
/Users/sayrer/camino
…
/Users/sayrer/webapp
/Users/sayrer/XULRunner
js> /** Use a conditional to show only directories **/
js> var dirPaths = [f.path for (f in dirIter(d)) if (f.isDirectory())];
js> print(dirPaths.join("\n"));
/Users/sayrer/bin
/Users/sayrer/bonecho
/Users/sayrer/camino
…
/Users/sayrer/webapp
/Users/sayrer/XULRunner
js>

We should try to keep a list of this stuff, and move the ideas into FUEL.