Status: Accepted
Owner: [email protected]
Labels: Type-Bug Priority-Medium
New issue 3837 by [email protected]:
mozilla/js1_5/extensions/regress-355497 fails on arm.debug
https://code.google.com/p/v8/issues/detail?id=3837
http://chromegw.corp.google.com/i/client.v8/builders/V8%20Linux%20-%20arm%20-%20sim%20-%20debug/builds/1239/steps/Mozilla/logs/regress-355497
The crash seems to be flaky from build to build. I got this stack trace
Stack trace:
yangguo@yangguo:~/v8$ g out/arm.debug/d8 --test --random-seed=2060030196
--nocrankshaft --nohard-abort --nodead-code-elimination --nofold-co
nstants --enable-slow-asserts --debug-code --verify-heap --expose-gc
test/mozilla/mozilla-shell-emulation.js test/mozilla/data/shell.js
test/mozilla/data/js1_5/shell.js
test/mozilla/data/js1_5/extensions/shell.js
test/mozilla/data/js1_5/extensions/regress-355497.js
GNU gdb (GDB) 7.8-gg7
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-grtev4-linux-gnu".
Type "show configuration" for configuration details.
<http://go/gdb-home FAQ: http://go/gdb-faq Email: gdb-team IRC: gdb>
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word".
Reading symbols from out/arm.debug/d8...r
done.
Loading v16/v17 libstdc++ pretty-printers ...
(gdb) r
Starting program: /usr/local/google/home/yangguo/v8/out/arm.debug/d8 --test
--random-seed=2060030196 --nocrankshaft --nohard-abort
--nodead-code-elimination --nofold-constants --enable-slow-asserts
--debug-code --verify-heap --expose-gc
test/mozilla/mozilla-shell-emulation.js test/mozilla/data/shell.js
test/mozilla/data/js1_5/shell.js
test/mozilla/data/js1_5/extensions/shell.js
test/mozilla/data/js1_5/extensions/regress-355497.js
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/grte/v4/lib64/libthread_db.so.1".
[New Thread 0xf7c92b40 (LWP 5472)]
[New Thread 0xf7491b40 (LWP 5474)]
[New Thread 0xf6c90b40 (LWP 5475)]
[New Thread 0xf648fb40 (LWP 5477)]
[New Thread 0xf5b8db40 (LWP 5478)]
BUGNUMBER: 355497
STATUS: Do not overflow stack with Array.slice, getter
FAILED! [reported from test()] Do not overflow stack with Array.slice,
getter: 1 : Expected value 'InternalError: too much recursion', Actual
value 'RangeError: Maximum call stack size exceeded'
FAILED! [reported from test()] Do not overflow stack with Array.slice,
getter: 2 : Expected value 'InternalError: too much recursion', Actual
value 'TypeError: undefined is not a function'
Program received signal SIGSEGV, Segmentation fault.
0x0882219d in
v8::internal::PropertyICCompiler::ComputeKeyedStoreMonomorphic
(receiver_map=..., strict_mode=v8::internal::STRICT,
store_mode=v8::internal::STANDARD_STORE) at ../src/ic/ic-compiler.cc:138
138 Isolate* isolate = receiver_map->GetIsolate();
(gdb) bt
#0 0x0882219d in
v8::internal::PropertyICCompiler::ComputeKeyedStoreMonomorphic
(receiver_map=..., strict_mode=v8::internal::STRICT,
store_mode=v8::internal::STANDARD_STORE) at ../src/ic/ic-compiler.cc:138
#1 0x08817625 in v8::internal::KeyedStoreIC::StoreElementStub
(this=0xff8055b8, receiver=..., store_mode=v8::internal::STANDARD_STORE)
at ../src/ic/ic.cc:1800
#2 0x088187eb in v8::internal::KeyedStoreIC::Store (this=0xff8055b8,
object=..., key=..., value=...) at ../src/ic/ic.cc:2089
#3 0x0881ad63 in v8::internal::__RT_impl_KeyedStoreIC_Miss (args=...,
isolate=0x9c7c680) at ../src/ic/ic.cc:2393
#4 0x0881ac31 in v8::internal::KeyedStoreIC_Miss (args_length=3,
args_object=0xf5b9cca0, isolate=0x9c7c680) at ../src/ic/ic.cc:2384
#5 0x08a37b8b in v8::internal::Simulator::SoftwareInterrupt
(this=0x9c96af8, instr=0x9ce91cc) at ../src/arm/simulator-arm.cc:1873
#6 0x08a3b45d in v8::internal::Simulator::DecodeType7 (this=0x9c96af8,
instr=0x9ce91cc) at ../src/arm/simulator-arm.cc:2996
#7 0x08a3e995 in v8::internal::Simulator::InstructionDecode
(this=0x9c96af8, instr=0x9ce91cc) at ../src/arm/simulator-arm.cc:3830
#8 0x08a3ea82 in v8::internal::Simulator::Execute (this=0x9c96af8)
at ../src/arm/simulator-arm.cc:3861
#9 0x08a3ecec in v8::internal::Simulator::CallInternal (this=0x9c96af8,
entry=0x57b17ce0 "\360O-\351\020\213", <incomplete sequence \355>)
at ../src/arm/simulator-arm.cc:3915
#10 0x08a3f13c in v8::internal::Simulator::Call (this=0x9c96af8,
entry=0x57b17ce0 "\360O-\351\020\213", <incomplete sequence \355>,
argument_count=5) at ../src/arm/simulator-arm.cc:3966
#11 0x086c322c in v8::internal::Invoke (is_construct=false, function=...,
receiver=..., argc=1, args=0x9e25820) at ../src/execution.cc:108
#12 0x086c35eb in v8::internal::Execution::Call (isolate=0x9c7c680,
callable=..., receiver=..., argc=1, argv=0x9e25820,
convert_receiver=false) at ../src/execution.cc:160
#13 0x086256e1 in v8::internal::CallJsBuiltin (isolate=0x9c7c680,
name=0x8d49515 "ArrayUnshift", args=...) at ../src/builtins.cc:285
#14 0x0862676b in v8::internal::Builtin_Impl_ArrayUnshift (args=...,
isolate=0x9c7c680) at ../src/builtins.cc:500
#15 0x086266b8 in v8::internal::Builtin_ArrayUnshift (args_length=2,
args_object=0xf5b9cd98, isolate=0x9c7c680) at ../src/builtins.cc:492
#16 0x08a37b8b in v8::internal::Simulator::SoftwareInterrupt
(this=0x9c96af8, instr=0x9cacfdc) at ../src/arm/simulator-arm.cc:1873
#17 0x08a3b45d in v8::internal::Simulator::DecodeType7 (this=0x9c96af8,
instr=0x9cacfdc) at ../src/arm/simulator-arm.cc:2996
#18 0x08a3e995 in v8::internal::Simulator::InstructionDecode
(this=0x9c96af8, instr=0x9cacfdc) at ../src/arm/simulator-arm.cc:3830
#19 0x08a3ea82 in v8::internal::Simulator::Execute (this=0x9c96af8)
at ../src/arm/simulator-arm.cc:3861
#20 0x08a3ecec in v8::internal::Simulator::CallInternal (this=0x9c96af8,
entry=0x57b17ce0 "\360O-\351\020\213", <incomplete sequence \355>)
at ../src/arm/simulator-arm.cc:3915
#21 0x08a3f13c in v8::internal::Simulator::Call (this=0x9c96af8,
entry=0x57b17ce0 "\360O-\351\020\213", <incomplete sequence \355>,
argument_count=5) at ../src/arm/simulator-arm.cc:3966
#22 0x086c322c in v8::internal::Invoke (is_construct=false, function=...,
receiver=..., argc=1, args=0xff8060a8) at ../src/execution.cc:108
#23 0x086c35eb in v8::internal::Execution::Call (isolate=0x9c7c680,
callable=..., receiver=..., argc=1, argv=0xff8060a8,
convert_receiver=true) at ../src/execution.cc:160
#24 0x08885997 in v8::internal::Object::SetPropertyWithDefinedSetter
(receiver=..., setter=..., value=...) at ../src/objects.cc:408
#25 0x088b3cb5 in v8::internal::JSObject::SetElementWithCallback
(object=..., structure=..., index=0, value=..., holder=...,
strict_mode=v8::internal::STRICT) at ../src/objects.cc:12236
#26 0x088b4a1f in v8::internal::JSObject::SetDictionaryElement (object=...,
index=0, value=..., attributes=NONE,
strict_mode=v8::internal::STRICT, check_prototype=true,
set_mode=v8::internal::SET_PROPERTY) at ../src/objects.cc:12433
#27 0x088b77ae in v8::internal::JSObject::SetElementWithoutInterceptor
(object=..., index=0, value=..., attributes=NONE,
strict_mode=v8::internal::STRICT, check_prototype=true,
set_mode=v8::internal::SET_PROPERTY) at ../src/objects.cc:12880
#28 0x088b6285 in v8::internal::JSObject::SetElement (object=..., index=0,
value=..., attributes=NONE, strict_mode=v8::internal::STRICT,
check_prototype=true, set_mode=v8::internal::SET_PROPERTY)
at ../src/objects.cc:12724
#29 0x0891c05e in v8::internal::Runtime::SetObjectProperty
(isolate=0x9c7c680, object=..., key=..., value=...,
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
