Status: New
Owner: ----

New issue 3463 by [email protected]: Crash with named interceptor (3.26.33)
http://code.google.com/p/v8/issues/detail?id=3463

When running following chunk of code on the latest node.js master (v0.11.14-pre):

vm = require('vm');
ctx = vm.createContext({console: console, a: 0})
vm.runInContext('var global = this', ctx)
for (var i = 0; i < 3; ++i) {
  vm.runInContext('console.log(a++)', ctx)
}
for (var i = 0; i < 3; ++i) {
  vm.runInContext('console.log(this.a++)', ctx)
}

I get a crash with a following stack trace:

0
1
2
3
4


#
# Fatal error in ../deps/v8/src/stub-cache.cc, line 636
# CHECK(receiver->HasNamedInterceptor()) failed
#

==== C stack trace ===============================

 1: ??
 2: ??
 3: ??
 4: ??
(lldb) r
Process 96716 stopped
* thread #1: tid = 0x1cc4a5, 0x0000000000000000, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
    frame #0: 0x0000000000000000
error: memory read failed for 0x0
There is a running process, kill it and restart?: [Y/n] n
(lldb) bt
* thread #1: tid = 0x1cc4a5, 0x0000000000000000, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
  * frame #0: 0x0000000000000000
frame #1: 0x00000001005f1960 node`v8::internal::OS::Abort() + 32 at platform-posix.cc:256 frame #2: 0x00000001000a6e59 node`V8_Fatal(file=0x0000000100925979, line=636, format=0x00000001008d4d44) + 473 at checks.cc:88 frame #3: 0x00000001004f6ec6 node`v8::internal::__RT_impl_StoreInterceptorProperty(args=Arguments at 0x00007fff5fbfe5c8, isolate=0x0000000102800000) + 246 at stub-cache.cc:636 frame #4: 0x00000001004f6dc9 node`v8::internal::StoreInterceptorProperty(args_length=3, args_object=0x00007fff5fbfe678, isolate=0x0000000102800000) + 137 at stub-cache.cc:629

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to