Status: New
Owner: ----

New issue 756 by [email protected]: Crash on going to calendar.google.com in latest tot chrome
http://code.google.com/p/v8/issues/detail?id=756

Detailed description of the issue.
#
# Fatal error in v8/src/x64/codegen-x64.cc, line 10449
# CHECK(!static_operands_type_.IsSmi()) failed
#


==== Stack trace ============================================

Security context: 0x7fffe9584679 <String[21]: http://www.google.com>
2: wca [http://www.google.com/calendar/static/6fb4a59cd45a6f64ffa7cafe10a1c3c3calendarjs_doozercompiled__en.js:230] (this=0x7fffe95e78f1 <JS Global Object>#0#,\
a=0x7fffe9576101 <true>)
3: _renderPost [http://www.google.com/calendar/static/6fb4a59cd45a6f64ffa7cafe10a1c3c3calendarjs_doozercompiled__en.js:238] (this=0x7fffe95e78f1 <JS Global Obj\
ect>#0#)
4: postRender [http://www.google.com/calendar/render?gsessionid=VxO0T3s-XsbdsY3-AWll2w:35] (this=0x7fffe95e78f1 <JS Global Object>#0#) 5: /* anonymous */ [http://www.google.com/calendar/render?gsessionid=VxO0T3s-XsbdsY3-AWll2w:2] (this=0x7fffe95e78f1 <JS Global Object>#0#)

==== Details ================================================

[2]: wca [http://www.google.com/calendar/static/6fb4a59cd45a6f64ffa7cafe10a1c3c3calendarjs_doozercompiled__en.js:230] (this=0x7fffe95e78f1 <JS Global Object>#0#,a=\
0x7fffe9576101 <true>) {
  // stack-allocated locals
  var e = 5
  var d = 1
  var c = 0x7fffeb187cb9 <a yq>>#1#
  var b = 0x7fffeb188149 <a um>>#2#
  // expression stack (top to bottom)
  [15] : 0x7fffe9576101 <true>
  [14] : 5
  [13] : 1
  [12] : 0x7fffe9576079 <undefined>
  [11] : 0x7fffe9576079 <undefined>
  [10] : 0x7fffedac84b9 <JS Function Zk>#3#
  [09] : 0x7fffeb188149 <a um>>#2#
  [08] : 0x7fffeb187cb9 <a yq>>#1#
  [07] : 0x7fffeb188199 <an HTMLDivElement>>#4#
  [06] : 0x7fffed9497e9 <JS Object>#5#
  [05] : 0x7fffed953a19 <JS Function pq>#6#
  [04] : 0x7fffed9497e9 <JS Object>#5#
--------- s o u r c e   c o d e ---------
function wca(a){var b=ai(),c=new yq;b=new um(b);var d=Qh.H().Ji(),e=Zh()?5:7;tu=new pq($k("dp_0"),c,b,$k,m,m,d,e,a);a=mn();tu.re(Vp(a));tu[wb]()}
-----------------------------------------
}

[3]: _renderPost [http://www.google.com/calendar/static/6fb4a59cd45a6f64ffa7cafe10a1c3c3calendarjs_doozercompiled__en.js:238] (this=0x7fffe95e78f1 <JS Global Objec\
t>#0#) {
  // heap-allocated locals
  var a = 0x7fffe9576079 <undefined>
--------- s o u r c e   c o d e ---------
function _renderPost(){wca(Jf(20));var a=Hi.H();Wr(a);Yg(a,"clm.updated",js);Yg(a,"gcal-kds",function(){for(var b=Mo(),c=0,d=b[E];c<d;++c)a[Ad](b[c])||Vr(b[c])});x\
ca();Cca();if(Fr)Fr();else Er=h}
-----------------------------------------
}

[4]: postRender [http://www.google.com/calendar/render?gsessionid=VxO0T3s-XsbdsY3-AWll2w:35] (this=0x7fffe95e78f1 <JS Global Object>#0#) {
  // stack-allocated locals
  var .catch-var = 0x7fffe9576079 <undefined>
  var .catch-var = 0x7fffe9576079 <undefined>
  // heap-allocated locals
  var .arguments = 0x7fffeb124f69 <an Arguments>>#7#
  var startTime = 0x7fffe95b5419 <String[15]: 20100625T162856>
  var startMode = 0x7fffe95af261 <String[4]: week>
  var rt_esDispatches = 0x7fffeb125011 <JS array[2]>#8#
  var rt_extraDispatches = 0x7fffeb125bd9 <JS array[1]>#9#
  var rt_promo = 0x7fffe9576139 <false>
  var rt_eventDispatches = 0x7fffeb124fb1 <JS array[0]>#10#
  var arguments = 0x7fffeb124f69 <an Arguments>>#7#
  var rt_clientDispatches = 0x7fffeb1255d9 <JS array[11]>#11#
--------- s o u r c e   c o d e ---------
function postRender() {??? try{var rt_promo=false;}catch(e){}? var rt_eventDispatches = [];? var rt_esDispatches = ['us','c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ 20100619/2\ 0100703 63413191736'];?? var rt_clientDispatches = [['_DS_put','c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ',70,0,0,'Scott Violet','America/Los_Angeles',null,null,null,'...

-----------------------------------------
}

[5]: /* anonymous */ [http://www.google.com/calendar/render?gsessionid=VxO0T3s-XsbdsY3-AWll2w:2] (this=0x7fffe95e78f1 <JS Global Object>#0#) {
  // stack-allocated locals
  var .result = 0x7fffe9576079 <undefined>
--------- s o u r c e   c o d e ---------
?postRender();?
-----------------------------------------
}


==== Key         ============================================

 #0# 0x7fffe95e78f1: 0x7fffe95e78f1 <JS Global Object>
 #1# 0x7fffeb187cb9: 0x7fffeb187cb9 <a yq>>
                 b: 0x7fffeb187d09 <a zq>>#12#
 #2# 0x7fffeb188149: 0x7fffeb188149 <a um>>
                 A: 0
 #3# 0x7fffedac84b9: 0x7fffedac84b9 <JS Function Zk>
 #4# 0x7fffeb188199: 0x7fffeb188199 <an HTMLDivElement>>
 #5# 0x7fffed9497e9: 0x7fffed9497e9 <JS Object>
 #6# 0x7fffed953a19: 0x7fffed953a19 <JS Function pq>
                 J: 0x7fffeb0270c1 <an Object>>#13#
 #7# 0x7fffeb124f69: 0x7fffeb124f69 <an Arguments>>
            callee: 0x7fffed8da709 <JS Function postRender>#14#
            length: 0
 #8# 0x7fffeb125011: 0x7fffeb125011 <JS array[2]>
                 0: 0x7fffe95b02e1 <String[2]: us>
1: 0x7fffe95b5281 <String[60]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ 20100619/20100703 63413191736>
 #9# 0x7fffeb125bd9: 0x7fffeb125bd9 <JS array[1]>
                 0: 0x7fffeb125c11 <JS array[2]>#15#
 #10# 0x7fffeb124fb1: 0x7fffeb124fb1 <JS array[0]>
 #11# 0x7fffeb1255d9: 0x7fffeb1255d9 <JS array[11]>
                 0: 0x7fffeb125661 <JS array[28]>#16#
                 1: 0x7fffeb1257f1 <JS array[1]>#17#
                 2: 0x7fffeb125829 <JS array[2]>#18#
                 3: 0x7fffeb1258b9 <JS array[1]>#19#
                 4: 0x7fffeb1258f1 <JS array[2]>#20#
                 5: 0x7fffeb125981 <JS array[4]>#21#
                 6: 0x7fffeb1259d1 <JS array[4]>#22#
                 7: 0x7fffeb125a21 <JS array[4]>#23#
                 8: 0x7fffeb125a71 <JS array[5]>#24#
                 9: 0x7fffeb125ac9 <JS array[2]>#25#
                  ...
 #12# 0x7fffeb187d09: 0x7fffeb187d09 <a zq>>
                 D: 0x7fffeb153689 <a yk>>#26#
                 C: 0
                 F: 0x7fffe9576139 <false>
 #13# 0x7fffeb0270c1: 0x7fffeb0270c1 <an Object>>
                 M: 0x7fffeb0272f1 <JS Function>#27#
                Tc: 0x7fffe9576139 <false>
 #14# 0x7fffed8da709: 0x7fffed8da709 <JS Function postRender>
 #15# 0x7fffeb125c11: 0x7fffeb125c11 <JS array[2]>
                 0: 0x7fffe95b2b21 <String[23]: _WarnBrowserDeprecation>
                 1: 1
 #16# 0x7fffeb125661: 0x7fffeb125661 <JS array[28]>
                 0: 0x7fffe95b2a39 <String[7]: _DS_put>
1: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 2: 70
                 3: 0
                 4: 0
                 5: 0x7fffe95b5309 <String[12]: Scott Violet>
                 6: 0x7fffe95b4729 <String[19]: America/Los_Angeles>
                 7: 0x7fffe9576021 <null>
                 8: 0x7fffe9576021 <null>
                 9: 0x7fffe9576021 <null>
                  ...
 #17# 0x7fffeb1257f1: 0x7fffeb1257f1 <JS array[1]>
                 0: 0x7fffe95b2ce1 <String[26]: _SE_refreshAddCalendarView>
 #18# 0x7fffeb125829: 0x7fffeb125829 <JS array[2]>
                 0: 0x7fffe95adf31 <String[2]: ap>
                 1: 0x7fffeb125869 <JS array[4]>#28#
 #19# 0x7fffeb1258b9: 0x7fffeb1258b9 <JS array[1]>
                 0: 0x7fffe95b2b51 <String[17]: _RedrawCheckboxes>
 #20# 0x7fffeb1258f1: 0x7fffeb1258f1 <JS array[2]>
                 0: 0x7fffe95adf31 <String[2]: ap>
                 1: 0x7fffeb125931 <JS array[4]>#29#
 #21# 0x7fffeb125981: 0x7fffeb125981 <JS array[4]>
                 0: 0x7fffe958ad19 <String[2]: sb>
1: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 2: 4
                 3: 1
 #22# 0x7fffeb1259d1: 0x7fffeb1259d1 <JS array[4]>
                 0: 0x7fffe958ad19 <String[2]: sb>
1: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 2: 3
                 3: 1
 #23# 0x7fffeb125a21: 0x7fffeb125a21 <JS array[4]>
                 0: 0x7fffe958ad19 <String[2]: sb>
1: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 2: 2
                 3: 1
 #24# 0x7fffeb125a71: 0x7fffeb125a71 <JS array[5]>
                 0: 0x7fffe958ad19 <String[2]: sb>
1: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 2: 1
                 3: 3
                 4: 600
 #25# 0x7fffeb125ac9: 0x7fffeb125ac9 <JS array[2]>
                 0: 0x7fffe95b2a11 <String[15]: _DS_SetPublicID>
1: 0x7fffe95b5369 <String[63]: X19wdWJsaWNfcHJpbmNpcGFsX19AcHVibGljLmNhbGVuZGFyLmdvb2dsZS5jb20>
 #26# 0x7fffeb153689: 0x7fffeb153689 <a yk>>
                 b: 20697
                 $: 6
                 V: 25
                 Z: 2010
 #27# 0x7fffeb0272f1: 0x7fffeb0272f1 <JS Function>
 #28# 0x7fffeb125869: 0x7fffeb125869 <JS array[4]>
0: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 1: 0
                 2: 0x7fffe95a4cb9 <String[22]: [email protected]>
                 3: 0x7fffe95a4cb9 <String[22]: [email protected]>
 #29# 0x7fffeb125931: 0x7fffeb125931 <JS array[4]>
0: 0x7fffe95b44f9 <String[30]: c2NvdHQudmlvbGV0QGdtYWlsLmNvbQ>
                 1: 0
                 2: 0x7fffe95a4cb9 <String[22]: [email protected]>
                 3: 0x7fffe95a4cb9 <String[22]: [email protected]>
=====================


--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to