Running with assertions enabled shows that the error is in “this.length >>>=0” 
expression on line 31. Reducing the testcase to just:

(function (p) {
 if (p) {
   this.length >>>= 0;  // Coerce to uint32.
 }
})(false)

also reproduces the problem (at least, the assertion; it will cause a somewhat 
different issue without assertions).

Attila.

> On 01 Dec 2016, at 12:18, Frantzius, Jörg <joerg.frantz...@aperto.com> wrote:
> 
> Hi Sunda,
> 
> you can reproduce by putting the following into a test.js file and executing 
> it using jjs.
> 
> ======== snip =============
> 
> function Buffer(subject, encoding) {
>  if (!util.isBuffer(this))
>    return new Buffer(subject, encoding);
> 
>  if (util.isNumber(subject)) {
>    this.length = +subject;
> 
>  } else if (util.isString(subject)) {
>    if (!util.isString(encoding) || encoding.length === 0)
>      encoding = 'utf8';
>    this.length = Buffer.byteLength(subject, encoding);
> 
>  // Handle Arrays, Buffers, Uint8Arrays or JSON.
>  } else if (util.isObject(subject)) {
>    if (subject.type === 'Buffer' && util.isArray(subject.data))
>      subject = subject.data;
>    this.length = +subject.length;
> 
>  } else {
>    throw new TypeError('must start with number, buffer, array or string');
>  }
> 
>  if (this.length > kMaxLength) {
>    throw new RangeError('Attempt to allocate Buffer larger than maximum ' +
>                         'size: 0x' + kMaxLength.toString(16) + ' bytes');
>  }
> 
>  if (this.length < 0)
>    this.length = 0;
>  else
>    this.length >>>= 0;  // Coerce to uint32.
> 
>  this.parent = undefined;
>  if (this.length <= (Buffer.poolSize >>> 1) && this.length > 0) {
>    if (this.length > poolSize - poolOffset)
>      createPool();
>    this.parent = sliceOnto(allocPool,
>                            this,
>                            poolOffset,
>                            poolOffset + this.length);
>    poolOffset += this.length;
> 
>    // Ensure aligned slices
>    if (poolOffset & 0x7) {
>      poolOffset |= 0x7;
>      poolOffset++;
>    }
>  } else {
>    alloc(this, this.length);
>  }
> 
>  if (util.isNumber(subject)) {
>    return;
>  }
> 
>  if (util.isString(subject)) {
>    // In the case of base64 it's possible that the size of the buffer
>    // allocated was slightly too large. In this case we need to rewrite
>    // the length to the actual length written.
>    var len = this.write(subject, encoding);
>    // Buffer was truncated after decode, realloc internal ExternalArray
>    if (len !== this.length) {
>      var prevLen = this.length;
>      this.length = len;
>      truncate(this, this.length);
>      // Only need to readjust the poolOffset if the allocation is a slice.
>      if (this.parent != undefined)
>        poolOffset -= (prevLen - len);
>    }
> 
>  } else if (util.isBuffer(subject)) {
>    subject.copy(this, 0, 0, this.length);
> 
>  } else if (util.isNumber(subject.length) || util.isArray(subject)) {
>    // Really crappy way to handle Uint8Arrays, but V8 doesn't give a simple
>    // way to access the data from the C++ API.
>    for (var i = 0; i < this.length; i++)
>      this[i] = subject[i];
>  }
> }
> 
> new Buffer(1024);
> 
> ========== snip ==============
> 
> 
> I’ll hopefully get my OCA signed and sent in soon, so I can contribute in 
> JIRA.
> 
> Regards,
> Jörg
> 
> 
> ---
> 
> Dipl. Inf. Jörg von Frantzius, Technical Director
> 
> E-Mail joerg.frantz...@aperto.com
> 
> Phone +49 30 283921-318
> Fax +49 30 283921-29
> 
> Aperto GmbH – An IBM Company
> Chausseestraße 5, D-10115 Berlin
> http://www.aperto.com<http://www.aperto.de/>
> http://www.facebook.com/aperto
> https://www.xing.com/companies/apertoag
> 
> HRB 77049 B, AG Berlin Charlottenburg
> Geschäftsführer: Dirk Buddensiek, Kai Großmann, Stephan Haagen, Daniel Simon
> 
> Am 01.12.2016 um 07:46 schrieb Sundararajan Athijegannathan 
> <sundararajan.athijegannat...@oracle.com<mailto:sundararajan.athijegannat...@oracle.com>>:
> 
> Is there a simple reduced test case that we can use it to reproduce the issue 
> you're seeing? Please send us the same and we'll file a bug  (or you may do 
> that as well).
> 
> Thanks,
> -Sundar
> 
> On 29/11/16, 11:11 PM, Frantzius, Jörg wrote:
> Hi,
> 
> with JDK 1.8.0_112 (on Mac OS X) I’m running into the following error. When 
> querying 
> bugs.openjdk.java.net<http://bugs.openjdk.java.net><http://bugs.openjdk.java.net>
>   for "Current frame's stack size doesn't match stackmap“, I only found bugs 
> dating from 2013, so this may not be known yet?
> 
> Unfortunately I can’t see the Javascript file name or line number in the 
> error message. The last known source location node/lib/fs.js:374 that I can 
> step to in the Netbeans debugger is calling a constructor „Buffer(size)“, 
> which is likely this source: 
> https://github.com/nodejs/node/blob/v0.12.7-release/lib/buffer.js#L48
> 
> Following is the error message:
> 
> java.lang.VerifyError: Inconsistent stackmap frames at branch target 404
> Exception Details:
>  Location:
>    
> jdk/nashorn/internal/scripts/Script$Recompilation$414$1806AA$\^function\_.L:1#Buffer(Ljdk/nashorn/internal/runtime/ScriptFunction;Ljava/lang/Object;Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
>  @382: goto
>  Reason:
>    Current frame's stack size doesn't match stackmap.
>  Current Frame:
>    bci: @382
>    flags: { }
>    locals: { 'jdk/nashorn/internal/runtime/ScriptFunction', 
> 'java/lang/Object', 'java/lang/Object', 'java/lang/Object', 
> 'jdk/nashorn/internal/runtime/ScriptObject' }
>    stack: { }
>  Stackmap Frame:
>    bci: @404
>    flags: { }
>    locals: { 'jdk/nashorn/internal/runtime/ScriptFunction', 
> 'java/lang/Object', 'java/lang/Object', 'java/lang/Object', 
> 'jdk/nashorn/internal/runtime/ScriptObject' }
>    stack: { 'java/lang/Object' }
>  Bytecode:
>    0x0000000: 2ab6 0014 3a04 1904 ba00 2000 0059 ba00
>    0x0000010: 2300 005f 2bba 0027 0000 9a00 1219 04ba
>    0x0000020: 002a 0000 2c2d ba00 2e00 00b0 1904 ba00
>    0x0000030: 2000 0059 ba00 3100 005f 2cba 0034 0000
>    0x0000040: 9900 102b 2cb8 003a ba00 3e00 00a7 00d5
>    0x0000050: 1904 ba00 2000 0059 ba00 4100 005f 2cba
>    0x0000060: 0044 0000 9900 4d19 04ba 0020 0000 59ba
>    0x0000070: 0041 0000 5f2d ba00 4400 0099 0012 2dba
>    0x0000080: 0047 0000 b800 4a03 8798 9a00 0912 4cb8
>    0x0000090: 0050 4e2b 1904 ba00 5500 0059 ba00 5800
>    0x00000a0: 005f 2c2d ba00 5c00 00ba 005f 0000 a700
>    0x00000b0: 7419 04ba 0020 0000 59ba 0062 0000 5f2c
>    0x00000c0: ba00 6500 0099 0043 2cba 0068 0000 126a
>    0x00000d0: b800 7099 0026 1904 ba00 2000 0059 ba00
>    0x00000e0: 7300 005f 2cba 0076 0000 ba00 7900 0099
>    0x00000f0: 000a 2cba 0076 0000 4d2b 2cba 007b 0000
>    0x0000100: ba00 3e00 00a7 001d 1904 b600 80ba 0083
>    0x0000110: 0000 1285 ba00 8900 0012 8b10 4507 b800
>    0x0000120: 91bf 2bba 0047 0000 1904 ba00 9400 00b8
>    0x0000130: 0097 9900 3a19 04b6 0080 ba00 9a00 0012
>    0x0000140: 9c19 04ba 0094 0000 59ba 009f 0000 5f10
>    0x0000150: 10ba 00a3 0000 b800 a712 a9b8 00a7 ba00
>    0x0000160: ac00 0012 8b10 4907 b800 91bf 2bba 007b
>    0x0000170: 0000 0e98 9c00 0d2b 03ba 00af 0000 a700
>    0x0000180: 162b 592b ba00 4700 00b8 00b3 b800 b7ba
>    0x0000190: 003e 0000 2b19 04b6 0080 ba00 ba00 00ba
>    0x00001a0: 00bd 0000 2bba 0047 0000 1904 ba00 5500
>    0x00001b0: 00ba 00c0 0000 047c b800 b75d 58b8 003a
>    0x00001c0: 5e58 989d 00c3 2bba 007b 0000 0e97 9e00
>    0x00001d0: b82b ba00 4700 0019 04ba 00c2 0000 1904
>    0x00001e0: ba00 c500 005f b800 3a5d 58b8 003a 675d
>    0x00001f0: 58b8 003a 5e58 979e 0013 1904 ba00 c800
>    0x0000200: 00b2 00cc ba00 d000 0057 2b19 04ba 00d3
>    0x0000210: 0000 b200 cc19 04ba 00d6 0000 2b19 04ba
>    0x0000220: 00c5 0000 1904 ba00 c500 002b ba00 4700
>    0x0000230: 00b8 00a7 ba00 da00 00ba 00bd 0000 1904
>    0x0000240: 1904 ba00 c500 002b ba00 4700 00b8 00a7
>    0x0000250: ba00 dd00 0019 04ba 00df 0000 1007 7e99
>    0x0000260: 0024 1904 1904 ba00 df00 0010 0780 ba00
>    0x0000270: e100 0019 0419 04ba 00e3 0000 0f63 ba00
>    0x0000280: e500 00a7 001a 1904 ba00 e800 00b2 00cc
>    0x0000290: 2b2b ba00 4700 00ba 00ec 0000 5719 04ba
>    0x00002a0: 0020 0000 59ba 0031 0000 5f2c ba00 3400
>    0x00002b0: 0099 0007 b200 ccb0 1904 ba00 2000 0059
>    0x00002c0: ba00 4100 005f 2cba 0044 0000 9900 8b2b
>    0x00002d0: 59ba 00ef 0000 5f2c 2dba 00f2 0000 3a05
>    0x00002e0: 1905 2bba 0047 0000 b800 f599 0064 2bba
>    0x00002f0: 0047 0000 3a06 2b19 05ba 005f 0000 1904
>    0x0000300: ba00 f800 00b2 00cc 2b2b ba00 4700 00ba
>    0x0000310: 00fb 0000 572b ba00 fe00 0019 04b6 0080
>    0x0000320: ba00 ba00 00b8 0101 9900 2419 0419 04ba
>    0x0000330: 00c5 0000 1906 b800 3a19 05b8 003a 675d
>    0x0000340: 58b8 003a 5e58 67ba 00e5 0000 a700 08b2
>    0x0000350: 00cc 3a06 a700 9e19 04ba 0020 0000 59ba
>    0x0000360: 0023 0000 5f2c ba00 2700 0099 001d 2c59
>    0x0000370: ba01 0400 005f 2b03 032b ba00 4700 00ba
>    0x0000380: 0108 0000 57a7 0063 1904 ba00 2000 0059
>    0x0000390: ba00 3100 005f 2cba 0047 0000 ba00 3400
>    0x00003a0: 009a 001a 1904 ba00 2000 0059 ba00 7300
>    0x00003b0: 005f 2cba 0079 0000 9900 3003 3607 1507
>    0x00003c0: 8739 0818 082b ba00 7b00 0098 9c00 1c2b
>    0x00003d0: 1808 2c18 08ba 010e 0000 ba01 1200 0018
>    0x00003e0: 080f 6339 08a7 ffde b200 cc3a 06b2 00cc
>    0x00003f0: 3a05 b200 ccb0
>  Stackmap Table:
>    append_frame(@44,Object[#125])
>    same_frame(@80)
>    same_frame(@141)
>    same_frame(@147)
>    same_frame(@177)
>    same_frame_extended(@249)
>    same_frame(@264)
>    same_frame(@290)
>    same_frame_extended(@364)
>    same_frame(@385)
>    same_locals_1_stack_item_frame(@404,Object[#286])
>    same_locals_1_stack_item_extended(@522,Object[#286])
>    same_locals_1_stack_item_extended(@643,Object[#286])
>    same_locals_1_stack_item_frame(@646,Object[#286])
>    same_locals_1_stack_item_frame(@669,Object[#286])
>    same_locals_1_stack_item_frame(@696,Object[#286])
>    
> full_frame(@844,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125],Object[#286],Object[#286]},{Object[#286]})
>    
> full_frame(@847,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125],Object[#286]},{Object[#286]})
>    
> full_frame(@852,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125],Object[#286],Object[#286]},{Object[#286]})
>    
> full_frame(@855,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125]},{Object[#286]})
>    same_locals_1_stack_item_frame(@904,Object[#286])
>    same_locals_1_stack_item_frame(@955,Object[#286])
>    
> full_frame(@963,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125],Top,Top,Integer,Double},{Object[#286]})
>    
> full_frame(@1000,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125]},{Object[#286]})
>    
> full_frame(@1010,{Object[#16],Object[#286],Object[#286],Object[#286],Object[#125],Object[#286],Object[#286]},{Object[#286]})
> 
> at java.lang.Class.getDeclaredFields0(Native Method)
> at java.lang.Class.privateGetDeclaredFields(Class.java:2583)
> at java.lang.Class.getDeclaredField(Class.java:2068)
> at 
> jdk.nashorn.internal.runtime.Context$ContextCodeInstaller$1.run(Context.java:209)
> at 
> jdk.nashorn.internal.runtime.Context$ContextCodeInstaller$1.run(Context.java:204)
> at java.security.AccessController.doPrivileged(Native Method)
> at 
> jdk.nashorn.internal.runtime.Context$ContextCodeInstaller.initialize(Context.java:204)
> at 
> jdk.nashorn.internal.codegen.CompilationPhase$InstallPhase.transform(CompilationPhase.java:508)
> at 
> jdk.nashorn.internal.codegen.CompilationPhase.apply(CompilationPhase.java:624)
> at jdk.nashorn.internal.codegen.Compiler.compile(Compiler.java:655)
> at 
> jdk.nashorn.internal.runtime.RecompilableScriptFunctionData.compileTypeSpecialization(RecompilableScriptFunctionData.java:725)
> at 
> jdk.nashorn.internal.runtime.RecompilableScriptFunctionData.getBest(RecompilableScriptFunctionData.java:905)
> at 
> jdk.nashorn.internal.runtime.ScriptFunctionData.getBest(ScriptFunctionData.java:375)
> at 
> jdk.nashorn.internal.runtime.ScriptFunctionData.getBestConstructor(ScriptFunctionData.java:247)
> at 
> jdk.nashorn.internal.runtime.ScriptFunction.findNewMethod(ScriptFunction.java:758)
> at jdk.nashorn.internal.runtime.ScriptObject.lookup(ScriptObject.java:1827)
> at 
> jdk.nashorn.internal.runtime.linker.NashornLinker.getGuardedInvocation(NashornLinker.java:104)
> at 
> jdk.nashorn.internal.runtime.linker.NashornLinker.getGuardedInvocation(NashornLinker.java:98)
> at 
> jdk.internal.dynalink.support.CompositeTypeBasedGuardingDynamicLinker.getGuardedInvocation(CompositeTypeBasedGuardingDynamicLinker.java:176)
> at 
> jdk.internal.dynalink.support.CompositeGuardingDynamicLinker.getGuardedInvocation(CompositeGuardingDynamicLinker.java:124)
> at 
> jdk.internal.dynalink.support.LinkerServicesImpl.getGuardedInvocation(LinkerServicesImpl.java:154)
> at jdk.internal.dynalink.DynamicLinker.relink(DynamicLinker.java:253)
> at 
> jdk.nashorn.internal.scripts.Script$Recompilation$402$9044AA$\^function\_.L:1#readFileSync(node/lib/fs.js:374)
> [..]
> 
> Any help or hints would be very appreciated!
> 
> Regards,
> Jörg
> 
> ---
> 
> Dipl. Inf. Jörg von Frantzius, Technical Director
> 
> E-Mail joerg.frantz...@aperto.com<mailto:joerg.frantz...@aperto.com>
> 
> Phone +49 30 283921-318
> Fax +49 30 283921-29
> 
> Aperto GmbH – An IBM Company
> Chausseestraße 5, D-10115 Berlin
> http://www.aperto.com<http://www.aperto.de/>
> http://www.facebook.com/aperto
> https://www.xing.com/companies/apertoag
> 
> HRB 77049 B, AG Berlin Charlottenburg
> Vorstand: Dirk Buddensiek (Vorsitzender), Kai Großmann, Stephan Haagen, 
> Daniel Simon
> Aufsichtsrat: Matthew Candy (Vorsitzender)
> 
> 

Reply via email to