Status: Accepted Owner: [email protected] Labels: Type-Bug Priority-Medium
New issue 342 by [email protected]: ASSERTION FAILED !map_.contains(obj) in bindings http://code.google.com/p/v8/issues/detail?id=342 What steps will reproduce the problem? 1. Open a page in Chromium with this content "<IFRAME></IFRAME>" 2. Open "JavaScript console" (Ctrl+Shift+J) ASSERT FAILS webkit\port\bindings\v8\dom_wrapper_map.h: virtual void set(KeyType* obj, v8::Persistent<ValueType> wrapper) { ****ASSERT(!map_.contains(obj));**** wrapper.MakeWeak(obj, weak_reference_callback_); map_.set(obj, *wrapper); } Seems to me it is related to the contentDocument property, given this (partial) stack: 02fde44c 63e11fad chrome_63c60000!WeakReferenceMap<WebCore::Node,v8::Object>::set+0x55 [i:\trunk\src\webkit\port\bindings\v8\dom_wrapper_map.h @ 36] 02fde46c 63e1cea4 chrome_63c60000!WebCore::V8Proxy::SetJSWrapperForDOMNode+0x7d [i:\trunk\src\webkit\port\bindings\v8\v8_proxy.cpp @ 823] 02fde508 64497a52 chrome_63c60000!WebCore::V8Proxy::NodeToV8Object+0x2f4 [i:\trunk\src\webkit\port\bindings\v8\v8_proxy.cpp @ 2952] 02fde544 646a74a0 chrome_63c60000!WebCore::HTMLIFrameElementInternal::contentDocumentAttrGett er+0xa2 [i:\trunk\src\chrome\debug\obj\webcore\bindings\v8htmliframeelement.cpp @ 212] 02fde614 646a883d chrome_63c60000!v8::internal::Object::GetPropertyWithCallback+0x1c0 [i:\trunk\src\v8\src\objects.cc @ 189] 02fde6a0 647a9957 chrome_63c60000!v8::internal::Object::GetProperty+0x2dd [i:\trunk\src\v8\src\objects.cc @ 463] 02fde73c 647ab58b chrome_63c60000!v8::internal::LoadIC::Load+0x5c7 [i:\trunk\src\v8\src\ic.cc @ 572] 02fde780 0343018b chrome_63c60000!v8::internal::LoadIC_Miss+0x9b [i:\trunk\src\v8\src\ic.cc @ 1124] -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ v8-dev mailing list [email protected] http://groups.google.com/group/v8-dev -~----------~----~----~----~------~----~------~--~---
