Status: New
Owner: ----
New issue 3984 by [email protected]: 3.25.28 jquery crash
https://code.google.com/p/v8/issues/detail?id=3984
Version: 3.25.28
OS: Linux
Architecture: mips
Crashed during long term testing (don't have any minimal test):
#0 0x75003810 in v8::internal::OS::Abort() () from
/core_dumps/my/relink/libname.so
#1 0x74dbca58 in v8::internal::Isolate::PushStackTraceAndDie(unsigned int,
v8::internal::Object*, v8::internal::Map*, unsigned int) () from
/core_dumps/my/relink/libname.so
#2 0x74e5c2b4 in v8::internal::Object::Lookup(v8::internal::Name*,
v8::internal::LookupResult*) () from /core_dumps/my/relink/libname.so
#3 0x74d9e3c0 in
v8::internal::LoadIC::Load(v8::internal::Handle<v8::internal::Object>,
v8::internal::Handle<v8::internal::String>) () from
/core_dumps/my/relink/libname.so
#4 0x74d9edb8 in v8::internal::LoadIC_Miss(int, v8::internal::Object**,
v8::internal::Isolate*) () from /core_dumps/my/relink/libname.so
==== JS stack trace =========================================
Security context: 0x5a428501 <String[21]: http://127.0.0.1:9090>
1: /* anonymous */(aka /* anonymous */)
[http://127.0.0.1:9090/jquery-2.0.0.min.js:4] (this=0x2d009ecd
<FixedArray[7]>#0#,e=0x3fb79e39 <JS Function x.fn.extend.find
(SharedFunctionInfo 0x3fb1ab59)>#1#)
2: find [http://127.0.0.1:9090/jquery-2.0.0.min.js:5] (this=0x3fb7a9c1
<JS Object>#2#,e=0x6aaa74e9 <String[12]: .bannerlogoh>)
3: new init [http://127.0.0.1:9090/jquery-2.0.0.min.js:4]
(this=0x2d009eb1 <JS Object>#3#,e=0x6aaa74e9
<String[12]: .bannerlogoh>,t=0x55b08091 <undefined>,n=0x3fb7a9c1 <JS
Object>#2#)
5: /* anonymous */(aka /* anonymous */)
[http://127.0.0.1:9090/jquery-2.0.0.min.js:~4] (this=0x55b08091
<undefined>,e=0x6aaa74e9 <String[12]: .bannerlogoh>,n=0x55b08091
<undefined>)
6: arguments adaptor frame: 1->2
7: L [http://127.0.0.1:9090/controller.js:1] (this=0x55b0df69 <JS
Global Object>#4#)
8: a [http://127.0.0.1:9090/controller.js:2] (this=0x55b0df69 <JS
Global Object>#4#)
9: /* anonymous */ [http://127.0.0.1:9090/controller.js:2]
(this=0x55b0df69 <JS Global Object>#4#)
==== Details ================================================
[1]: /* anonymous */(aka /* anonymous */)
[http://127.0.0.1:9090/jquery-2.0.0.min.js:4] (this=0x2d009ecd
<FixedArray[7]>#0#,e=0x3fb79e39 <JS Function x.fn.extend.find
(SharedFunctionInfo 0x3fb1ab59)>#1#) {
// stack-allocated locals
var t = 0x55b08091 <undefined>
// expression stack (top to bottom)
[05] : 0x5a408351 <String[11]: constructor>
[04] : 0x2d009ecd <FixedArray[7]>#0#
[03] : 0x2d009ecd <FixedArray[7]>#0#
[02] : 0x3fb549d5 <JS Function x (SharedFunctionInfo 0x3fb158c1)>#5#
[01] : 0x3fb7a5d1 <JS Function x.extend.merge (SharedFunctionInfo
0x3fb16781)>#6#
--------- s o u r c e c o d e ---------
function (e){var t=x.merge(this.constructor(),e);return
t.prevObject=this,t.context=this.context,t}
-----------------------------------------
}
[2]: find [http://127.0.0.1:9090/jquery-2.0.0.min.js:5] (this=0x3fb7a9c1
<JS Object>#2#,e=0x6aaa74e9 <String[12]: .bannerlogoh>) {
// stack-allocated locals
var n = // no expression found - inconsistent frame?
// heap-allocated locals
var t = 0x55b08091 <undefined>
var r = 1
var i = 1
--------- s o u r c e c o d e ---------
function (e){var t,n,r,i=this.length;if("string"!=typeof e)return
t=this,this.pushStack(x(e).filter(function(){for(r=0;i>r;r++)if(x.contains(t[r],this))return!0}));for(n=[],r=0;i>r;r++)x.find(e,this[r],n);return
n=this.pushStack(i>1?x.unique(n):n),n.selector=(this.selector?this.selector+" ":"")+e,n}
-----------------------------------------
}
[3]: new init [http://127.0.0.1:9090/jquery-2.0.0.min.js:4]
(this=0x2d009eb1 <JS Object>#3#,e=0x6aaa74e9
<String[12]: .bannerlogoh>,t=0x55b08091 <undefined>,n=0x3fb7a9c1 <JS
Object>#2#) {
// stack-allocated locals
var r = 0x55b08081 <null>
var i = 0x55b08091 <undefined>
// expression stack (top to bottom)
[04] : 0x6aaa74e9 <String[12]: .bannerlogoh>
[03] : 0x3fb7a9c1 <JS Object>#2#
[02] : 0x3fb79e39 <JS Function x.fn.extend.find (SharedFunctionInfo
0x3fb1ab59)>#1#
--------- s o u r c e c o d e ---------
function (e,t,n){var r,i;if(!e)return this;if("string"==typeof
e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r|
|!r[1]&&t)return!t||t.jquery?(t||
n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof
x?t[0]:t,x.merge(this,x.parseHTML(r[1],t&&t.nodeType?...
-----------------------------------------
}
[5]: /* anonymous */(aka /* anonymous */)
[http://127.0.0.1:9090/jquery-2.0.0.min.js:~4] (this=0x55b08091
<undefined>,e=0x6aaa74e9 <String[12]: .bannerlogoh>,n=0x55b08091
<undefined>) {
// optimized frame
}
[6]: arguments adaptor frame: 1->2 {
// actual arguments
[00] : 0x6aaa74e9 <String[12]: .bannerlogoh>
}
...
==== Key ============================================
#0# 0x2d009ecd: 0x2d009ecd <FixedArray[7]>
0: 0x3fb79e39 <JS Function x.fn.extend.find
(SharedFunctionInfo 0x3fb1ab59)>#1#
1: 0x3fb53215 <FixedArray[137]>#11#
2: 0
3: 0x55b0debd <JS Object>#12#
4: 0x55b08091 <undefined>
5: 1
6: 1
#1# 0x3fb79e39: 0x3fb79e39 <JS Function x.fn.extend.find
(SharedFunctionInfo 0x3fb1ab59)>
#2# 0x3fb7a9c1: 0x3fb7a9c1 <JS Object>
context: 0x3fbc3149 <an HTMLDocument with map 0x4f616ba9>#13#
length: 1
#3# 0x2d009eb1: 0x2d009eb1 <JS Object>
#4# 0x55b0df69: 0x55b0df69 <JS Global Object>
#5# 0x3fb549d5: 0x3fb549d5 <JS Function x (SharedFunctionInfo 0x3fb158c1)>
#6# 0x3fb7a5d1: 0x3fb7a5d1 <JS Function x.extend.merge (SharedFunctionInfo
0x3fb16781)>
#7# 0x6d8c2f81: 0x6d8c2f81 <an HTMLImageElement with map 0x4f6846a9>
#8# 0x6d8d32e5: 0x6d8d32e5 <JS Function L (SharedFunctionInfo 0x6d8ccdb5)>
#9# 0x30c7fe21: 0x30c7fe21 <JS Function a (SharedFunctionInfo 0x30c66aa9)>
#10# 0x4d368745: 0x4d368745 <an HTMLCollection with map 0x24a168b1>
#11# 0x3fb53215: 0x3fb53215 <FixedArray[137]>
0: 0x3fb52411 <JS Function (SharedFunctionInfo
0x3fb1e20d)>#14#
1: 0x3fbc2f65 <FixedArray[94]>#15#
2: 0
3: 0x55b0debd <JS Object>#12#
4: 0x55b08091 <undefined>
5: 0x55b0df69 <JS Global Object>#4#
6: 0x3fb7a9c1 <JS Object>#2#
I know it is a old code, but maybe you will have some suggestions.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
