Status: Untriaged
Owner: ----
Labels: Type-Bug Pri-2 OS-Linux Area-Misc Size-Medium valgrind

New issue 9488 by [email protected]: Valgrind reports invalid read in  
WTF::IdentityHashTranslator<>::equal(...)
http://code.google.com/p/chromium/issues/detail?id=9488

A debug build under valgrind ran into trouble in
LayoutTests/http/tests/misc/acid3.html

Here's the stack trace:
17:04:02 valgrind_analyze.py [ERROR] InvalidRead
Invalid read of size 4
   WTF::IdentityHashTranslator<WebCore::Node*, std::pair<WebCore::Node*,  
v8::Object*>,
WTF::PtrHash<WebCore::Node*> >::equal(WebCore::Node* const&, WebCore::Node*  
const&)
(third_party/WebKit/JavaScriptCore/wtf/HashTable.h:278)
   std::pair<WebCore::Node*, v8::Object*>* WTF::HashTable<WebCore::Node*,
std::pair<WebCore::Node*, v8::Object*>,  
WTF::PairFirstExtractor<std::pair<WebCore::Node*,
v8::Object*> >, WTF::PtrHash<WebCore::Node*>,
WTF::PairHashTraits<WTF::HashTraits<WebCore::Node*>,  
WTF::HashTraits<v8::Object*> >,
WTF::HashTraits<WebCore::Node*> >::lookup<WebCore::Node*,
WTF::IdentityHashTranslator<WebCore::Node*, std::pair<WebCore::Node*,  
v8::Object*>,
WTF::PtrHash<WebCore::Node*> > >(WebCore::Node* const&)
(third_party/WebKit/JavaScriptCore/wtf/HashTable.h:490)
   WTF::HashTable<WebCore::Node*, std::pair<WebCore::Node*, v8::Object*>,
WTF::PairFirstExtractor<std::pair<WebCore::Node*, v8::Object*> >,
WTF::PtrHash<WebCore::Node*>,  
WTF::PairHashTraits<WTF::HashTraits<WebCore::Node*>,
WTF::HashTraits<v8::Object*> >, WTF::HashTraits<WebCore::Node*>
> ::lookup(WebCore::Node* const&)  
> (third_party/WebKit/JavaScriptCore/wtf/HashTable.h:340)
   WTF::HashMap<WebCore::Node*, v8::Object*, WTF::PtrHash<WebCore::Node*>,
WTF::HashTraits<WebCore::Node*>, WTF::HashTraits<v8::Object*>  
>::get(WebCore::Node*
const&) const (third_party/WebKit/JavaScriptCore/wtf/HashMap.h:207)
   WeakReferenceMap<WebCore::Node, v8::Object>::get(WebCore::Node*)
(webkit/port/bindings/v8/dom_wrapper_map.h:29)
   WebCore::V8Proxy::NodeToV8Object(WebCore::Node*)
(webkit/port/bindings/v8/v8_proxy.cpp:3239)
   WebCore::NodeInternal::insertBeforeCallback(v8::Arguments const&)
(chrome/Hammer/dbg/obj/webkit/V8Bindings/DerivedSources/V8Node.cpp:227)
   v8::internal::Builtin_HandleApiCall(int, v8::internal::Object**)  
(v8/src/builtins.cc:380)
   0x12C9414A ()
   0x12CD8DC0 ()
   0x12CBE62D ()
   0x12C94BF8 ()
   0x12C94673 ()
   v8::internal::Invoke(bool, v8::internal::Handle<v8::internal::JSFunction>,
v8::internal::Handle<v8::internal::Object>, int, v8::internal::Object***,  
bool*)
(v8/src/execution.cc:89)
    
v8::internal::Execution::Call(v8::internal::Handle<v8::internal::JSFunction>,
v8::internal::Handle<v8::internal::Object>, int, v8::internal::Object***,  
bool*)
(v8/src/execution.cc:116)
   v8::Function::Call(v8::Handle<v8::Object>, int, v8::Handle<v8::Value>*)
(v8/src/api.cc:2038)
   WebCore::V8Proxy::CallFunction(v8::Handle<v8::Function>,  
v8::Handle<v8::Object>, int,
v8::Handle<v8::Value>*) (webkit/port/bindings/v8/v8_proxy.cpp:1580)
   WebCore::ScheduledAction::execute(WebCore::ScriptExecutionContext*)
(third_party/WebKit/WebCore/bindings/v8/ScheduledAction.cpp:104)
   WebCore::DOMTimer::fired()  
(third_party/WebKit/WebCore/page/DOMTimer.cpp:125)
   WebCore::ThreadTimers::fireTimers(double,  
WTF::Vector<WebCore::TimerBase*, 0u>
const&) (third_party/WebKit/WebCore/platform/ThreadTimers.cpp:111)
   WebCore::ThreadTimers::sharedTimerFiredInternal()
(third_party/WebKit/WebCore/platform/ThreadTimers.cpp:141)
   WebCore::ThreadTimers::sharedTimerFired()
(third_party/WebKit/WebCore/platform/ThreadTimers.cpp:122)
   webkit_glue::WebKitClientImpl::DoTimeout()  
(webkit/glue/webkitclient_impl.h:40)
   void DispatchToMethod<webkit_glue::WebKitClientImpl, void
(webkit_glue::WebKitClientImpl::*)()>(webkit_glue::WebKitClientImpl*, void
(webkit_glue::WebKitClientImpl::*)(), Tuple0 const&) (base/tuple.h:383)
   base::BaseTimer<webkit_glue::WebKitClientImpl, false>::TimerTask::Run()
(base/timer.h:160)
   MessageLoop::RunTask(Task*) (base/message_loop.cc:308)
   MessageLoop::DeferOrRunPendingTask(MessageLoop::PendingTask const&)
(base/message_loop.cc:316)
   MessageLoop::DoWork() (base/message_loop.cc:416)
   base::MessagePumpForUI::HandleDispatch() (base/message_pump_glib.cc:190)
   (anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*),  
void*)
(base/message_pump_glib.cc:75)



--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to