Status: New
Owner: ----
CC: [email protected],  [email protected]
Labels: Type-Bug Priority-Medium

New issue 4282 by [email protected]: Fatal error in v8::Object::SetInternalField
https://code.google.com/p/v8/issues/detail?id=4282

Version: 4b38c15
OS: Ubuntu 15.04
Architecture: x86_64

What steps will reproduce the problem?
1. Load this with debug v8:

JSON.stringify(Intl,Worker,parseInt);


Backtrace:


#
# Fatal error in v8::Object::SetInternalField()
# Internal field out of bounds
#

[New Thread 0x7ffff53b4700 (LWP 17129)]
[New Thread 0x7ffff5bb5700 (LWP 17128)]
[New Thread 0x7ffff63b6700 (LWP 17127)]
[New Thread 0x7ffff6bb7700 (LWP 17126)]

Program received signal SIGILL, Illegal instruction.
v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:229
229         V8_IMMEDIATE_CRASH();
(gdb) bt
#0  v8::base::OS::Abort () at ../src/base/platform/platform-posix.cc:229
#1 0x0000000000ad860f in v8::Utils::ReportApiFailure (location=0x16457ff "v8::Object::SetInternalField()", message=0x1647a85 "Internal field out of bounds")
    at ../src/api.cc:289
#2 0x0000000000ad85af in v8::Utils::ApiCheck (condition=false, location=0x16457ff "v8::Object::SetInternalField()",
    message=0x1647a85 "Internal field out of bounds") at .././src/api.h:185
#3 0x0000000000aff25d in v8::InternalFieldOK (obj=..., index=0, location=0x16457ff "v8::Object::SetInternalField()") at ../src/api.cc:5281 #4 0x0000000000aff37a in v8::Object::SetInternalField (this=0x7fffffffcc90, index=0, value=...) at ../src/api.cc:5299 #5 0x0000000000aaa041 in v8::Shell::WorkerNew (args=...) at ../src/d8.cc:703 #6 0x000000000114b80c in v8::internal::FunctionCallbackArguments::Call (this=0x7fffffffca58, f=0xaa9f10 <v8::Shell::WorkerNew(v8::FunctionCallbackInfo<v8::Value> const&)>) at ../src/arguments.cc:33 #7 0x0000000000b70609 in v8::internal::HandleApiCallHelper<false> (isolate=0x23c8040, args=...) at ../src/builtins.cc:1092 #8 0x0000000000b7c3ac in v8::internal::Builtin_Impl_HandleApiCall (args=..., isolate=0x23c8040) at ../src/builtins.cc:1115 #9 0x0000000000b70bf0 in v8::internal::Builtin_HandleApiCall (args_length=4, args_object=0x7fffffffcc90, isolate=0x23c8040) at ../src/builtins.cc:1111
#10 0x0000343405309b7b in ?? ()
#11 0x00003c2c79934bf9 in ?? ()
#12 0x0000343405309ac1 in ?? ()
#13 0x00007fffffffcc50 in ?? ()
#14 0x00007fffffffccb8 in ?? ()
#15 0x000034340533b1ba in ?? ()
#16 0x0000054ffe32a059 in ?? ()
#17 0x0000054ffe30d089 in ?? ()
#18 0x00003c2c79904291 in ?? ()
#19 0x000028f6d8012731 in ?? ()


Attachments:
        crash.js  37 bytes

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to