Status: New
Owner: ----
New issue 758 by ruanshudong: v8 crash
http://code.google.com/p/v8/issues/detail?id=758
#
# Fatal error in v8/src/x64/codegen-x64.cc, line 10449
# CHECK(!static_operands_type_.IsSmi()) failed
#
==== Stack trace ============================================
Security context: 0x7f64a0e7c8e1 <JS Object>#0#
2: /* anonymous */ [0x7f64a0e3c079 <undefined>:1] (this=0x7f64a0e7c9e9
<JS Global Object>#1#)
3: arguments adaptor frame: 1->0
4: /* anonymous */ [http://i.sso.sina.com.cn/js/ssologin.js:1]
(this=0x7f64a0e7c9e9 <JS Global Object>#1#)
==== Details ================================================
[2]: /* anonymous */ [0x7f64a0e3c079 <undefined>:1] (this=0x7f64a0e7c9e9
<JS Global Object>#1#) {
// stack-allocated locals
var .result = 0x7f64a0e3c079 <undefined>
// expression stack (top to bottom)
[01] : 0x7f64a3097d51 <an Object>>#2#
--------- s o u r c e c o d e ---------
function SSOController(){var me=this;var updateCookieTimer=null;var
updateCookieTimeHardLimit=1800;var cookieExpireTimeLength=3600*24;var
crossDomainForward=null;var crossDomainTimer=null;var crossDomainTime=3;var
autoLoginCallBack2=null;var
ssoCrosssDomainUrl='http://login.sina.com.cn/sso/crossdoma...
-----------------------------------------
}
[3]: arguments adaptor frame: 1->0 {
// actual arguments
[00] : 0x7f64a3093481 <Very long string[18440]>#3# // not passed to
callee
}
[4]: /* anonymous */ [http://i.sso.sina.com.cn/js/ssologin.js:1]
(this=0x7f64a0e7c9e9 <JS Global Object>#1#) {
// stack-allocated locals
var .result = 0x7f64a0e3c079 <undefined>
// expression stack (top to bottom)
[01] : 0x7f64a3097ce1 <JS Function>#4#
--------- s o u r c e c o d e ---------
eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]|
|
e(c)}k=[function(e){return
d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new
RegExp('\\b'+e(c)...
-----------------------------------------
}
==== Key ============================================
#0# 0x7f64a0e7c8e1: 0x7f64a0e7c8e1 <JS Object>
#1# 0x7f64a0e7c9e9: 0x7f64a0e7c9e9 <JS Global Object>
#2# 0x7f64a3097d51: 0x7f64a3097d51 <an Object>>
#3# 0x7f64a3093481: 0x7f64a3093481 <Very long string[18440]>
#4# 0x7f64a3097ce1: 0x7f64a3097ce1 <JS Function>
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
