Status: New
Owner: ----
Labels: Type-Bug Priority-Medium

New issue 4271 by [email protected]: Fatal error in v8::Object::GetInternalField
https://code.google.com/p/v8/issues/detail?id=4271

Version: b0493ed
OS: Ubuntu 15.04
Architecture: x64

What steps will reproduce the problem?
1. Load this with debug v8:

Worker.prototype.terminate();


Backtrace:

#
# Fatal error in v8::Object::GetInternalField()
# Internal field out of bounds
#

Program received signal SIGILL, Illegal instruction.
v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:229
229         V8_IMMEDIATE_CRASH();
(gdb) bt
#0  v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:229
#1 0x0000000000b0eb6f in v8::Utils::ReportApiFailure (location=0x167b026 "v8::Object::GetInternalField()", message=0x167d2df "Internal field out of bounds") at ../src/api.cc:289 #2 0x0000000000b0eb0f in v8::Utils::ApiCheck (condition=false, location=0x167b026 "v8::Object::GetInternalField()", message=0x167d2df "Internal field out of bounds") at .././src/api.h:185 #3 0x0000000000b357bd in v8::InternalFieldOK (obj=..., index=0, location=0x167b026 "v8::Object::GetInternalField()") at ../src/api.cc:5304 #4 0x0000000000b356f6 in v8::Object::SlowGetInternalField (this=0x7fffffffd408, index=0) at ../src/api.cc:5313 #5 0x0000000000ae0d8b in v8::Object::GetInternalField (this=0x7fffffffd408, index=0) at ../include/v8.h:7610 #6 0x0000000000ae27d6 in v8::Shell::WorkerTerminate (args=...) at ../src/d8.cc:798 #7 0x000000000118238c in v8::internal::FunctionCallbackArguments::Call (this=0x7fffffffd1e8, f=0xae2790 <v8::Shell::WorkerTerminate(v8::FunctionCallbackInfo<v8::Value> const&)>) at ../src/arguments.cc:33 #8 0x0000000000ba6b99 in v8::internal::HandleApiCallHelper<false> (isolate=0x23fe040, args=...) at ../src/builtins.cc:1092 #9 0x0000000000bb2d5c in v8::internal::Builtin_Impl_HandleApiCall (args=..., isolate=0x23fe040) at ../src/builtins.cc:1115 #10 0x0000000000ba7180 in v8::internal::Builtin_HandleApiCall (args_length=2, args_object=0x7fffffffd408, isolate=0x23fe040) at ../src/builtins.cc:1111
#11 0x000026e0b7409b7b in ?? ()
#12 0x000026e0b7409ac1 in ?? ()
#13 0x00007fffffffd3e0 in ?? ()
#14 0x00007fffffffd430 in ?? ()
#15 0x000026e0b743a50b in ?? ()
#16 0x000036d384a29d29 in ?? ()
#17 0x00003d707e00f2e1 in ?? ()
#18 0x000036d384a29d29 in ?? ()
#19 0x00003957ef6041b9 in ?? ()
#20 0x000036d384a2c7c9 in ?? ()
#21 0x000036d384a04101 in ?? ()
#22 0x00007fffffffd468 in ?? ()
#23 0x000026e0b7431abd in ?? ()
#24 0x00003d707e00c791 in ?? ()
#25 0x000036d384a2c7c9 in ?? ()
#26 0x000026e0b74319c1 in ?? ()
#27 0x0000000800000000 in ?? ()
#28 0x0000000000000000 in ?? ()


Attachments:
        test.js  29 bytes

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to