Comment #2 on issue 3661 by impinball: Crash with ES6 Classes
https://code.google.com/p/v8/issues/detail?id=3661

Confirmed last case (without new). This should throw a ReferenceError because C is callable as a constructor, but not as a function. Lots of detail below.

OS: Ubuntu 14.04 64-bit.
Make target: x64.debug
Git hash: 4a9579feebfd49470e901acbb7c090e3317dfac9

Script (test.js):
class C {}
C()

Command: d8 --harmony_classes --log_all --gdbjit-all test.js

GDB Output:

---START---
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff6dcd700 (LWP 10486)]
[New Thread 0x7ffff65cc700 (LWP 10487)]
[New Thread 0x7ffff5dcb700 (LWP 10488)]


#
# Fatal error in ../src/builtins.cc, line 62
# CHECK(Arguments::length() >= 1) failed
#

==== C stack trace ===============================

 1: V8_Fatal
 2: ??
 3: ??
 4: ??

Program received signal SIGILL, Illegal instruction.
v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:211
211         V8_IMMEDIATE_CRASH();
---END---

v8.log is attached.

===============================================================================

I can tell it may not be platform-specific, and it has to do with the arguments being counted incorrectly.

Here's my output from GDB after setting a checkpoint:

[New Thread 0x7ffff6dcd700 (LWP 10532)]
[New Thread 0x7ffff65cc700 (LWP 10533)]
[New Thread 0x7ffff5dcb700 (LWP 10534)]


#
# Fatal error in ../src/builtins.cc, line 62
# CHECK(Arguments::length() >= 1) failed
#

==== C stack trace ===============================

 1: V8_Fatal
 2: ??
 3: ??
 4: ??

Program received signal SIGILL, Illegal instruction.
v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:211
211         V8_IMMEDIATE_CRASH();

-------------------------------------------------------------------------------

Note that I can't `restart` from the checkpoint I set because the process had already been terminated via that SIGILL signal.

Attachments:
        v8.log  137 KB
        test.js  15 bytes

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to