Status: New
Owner: ----

New issue 1900 by [email protected]: Fatal error in v8/src/objects-inl.h, line 3046 # CHECK(kind() == FUNCTION) failed on inspector/debugger/watch-expressions-panel-switch.html layout test
http://code.google.com/p/v8/issues/detail?id=1900

See http://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=inspector%2Fdebugger%2Fwatch-expressions-panel-switch.html&showExpectations=true, this test crashes occasionally on linux debug with an assertion inside V8. Full stack:



#
# Fatal error in v8/src/objects-inl.h, line 3046
# CHECK(kind() == FUNCTION) failed
#


==== Stack trace ============================================

Security context: 0x1f5dcd1938b9 <JS Object>#0#
1: ToNumber [native runtime.js:~527] (this=0xfc534f08459 <JS Object>#1#,a=0x3427ac258f41 <String[4]: 1637>) 2: EQUALS(aka EQUALS) [native runtime.js:~54] (this=0x3427ac258f41 <String[4]: 1637>,a=17) 3: matchesScript [native debug.js:~394] (this=0x3f2d9694aad1 <a ScriptBreakPoint>#2#,a=0x3f2d969b4259 <a Script value = 0x1e2d0ff97069 <Script>>#3#) 4: setScriptBreakPoint [native debug.js:~781] (this=0x1e2d0ffe4e99 <an Object>#4#,type=0,script_id_or_name=0x3427ac258f41 <String[4]: 1637>,opt_line=9,opt_column=0,opt_condition=0x1d3c143096e9 <String[0]:
,opt_groupId=0x1e2d0ff04121 <undefined>)
5: setScriptBreakPointById [native debug.js:810] (this=0x1e2d0ffe4e99 <an Object>#4#,script_id=0x3427ac258f41 <String[4]: 1637>,opt_line=9,opt_column=0,opt_condition=0x1d3c143096e9 <String[0]:
,opt_groupId=0x1e2d0ff04121 <undefined>)
    6: arguments adaptor frame: 4->5
7: /* anonymous */ [0x1e2d0ff04121 <undefined>:112] (this=0x1f5dcd1939c1 <JS Global Object>#5#,execState=0x3f2d9694aaa9 <an ExecutionState>#6#,args=0x3f2d9694a829 <an Object>#7#)

==== Details ================================================

[1]: ToNumber [native runtime.js:~527] (this=0xfc534f08459 <JS Object>#1#,a=0x3427ac258f41 <String[4]: 1637>) {
--------- s o u r c e   c o d e ---------
function ToNumber(a){?if((typeof(a)==='number'))return a;?if((typeof(a)==='string')){?return %_HasCachedArrayIndex(a)?%_GetCachedArrayIndex(a)?:%StringToNumber(a);?}?if((typeof(a)==='boolean'))return a?1:0;?if((typeof(a)==='undefined'))return $NaN;?return((a===null))?0:ToNumber(%DefaultNumber(a));?}
-----------------------------------------
}

[2]: EQUALS(aka EQUALS) [native runtime.js:~54] (this=0x3427ac258f41 <String[4]: 1637>,a=17) {
  // stack-allocated locals
  var b = 0x3427ac258f41 <String[4]: 1637>
  // expression stack (top to bottom)
  [02] : 0x3427ac258f41 <String[4]: 1637>
  [01] : 0xfc534f08459 <JS Object>#1#
--------- s o u r c e   c o d e ---------
function EQUALS(a){?if((typeof(this)==='string')&&(typeof(a)==='string'))return %StringEquals(this,a);?var b=this;??while(true){?if((typeof(b)==='number')){?while(true){?if((typeof(a)==='number'))return %NumberEquals(b,a);?if((a==null))return 1;?if(!(%_IsSpecObject(a))){??return %NumberEquals(b,%ToNumber(a));?}?a=...

-----------------------------------------
}

[3]: matchesScript [native debug.js:~394] (this=0x3f2d9694aad1 <a ScriptBreakPoint>#2#,a=0x3f2d969b4259 <a Script value = 0x1e2d0ff97069 <Script>>#3#) {
  // expression stack (top to bottom)
  [01] : 17
  [00] : 0x3427ac258f41 <String[4]: 1637>
--------- s o u r c e   c o d e ---------
function (a){?if(this.type_==Debug.ScriptBreakPointType.ScriptId){?return this.script_id_==a.id;?}else{??if(!(a.line_offset<=this.line_&&?this.line_<a.line_offset+a.lineCount())){?return false;?}?if(this.type_==Debug.ScriptBreakPointType.ScriptName){?return this.script_name_==a.nameOrSourceURL();?}else if(th...

-----------------------------------------
}

[4]: setScriptBreakPoint [native debug.js:~781] (this=0x1e2d0ffe4e99 <an Object>#4#,type=0,script_id_or_name=0x3427ac258f41 <String[4]: 1637>,opt_line=9,opt_column=0,opt_condition=0x1d3c143096e9 <String[0]:
,opt_groupId=0x1e2d0ff04121 <undefined>) {
  // stack-allocated locals
  var a = 0x3f2d9694aad1 <a ScriptBreakPoint>#2#
  var c = 19
  var b = 0x3f2d969b43b9 <JS array[30]>#8#
  // expression stack (top to bottom)
  [04] : 0x3f2d969b4259 <a Script value = 0x1e2d0ff97069 <Script>>#3#
  [03] : 0x3f2d9694aad1 <a ScriptBreakPoint>#2#
--------- s o u r c e   c o d e ---------
function (type,script_id_or_name,?opt_line,opt_column,opt_condition,?opt_groupId){??var a=?new ScriptBreakPoint(type,script_id_or_name,opt_line,opt_column,?opt_groupId);???a.number_=next_break_point_number++;?a.setCondition(opt_condition);?script_break_points.push(a);????var b=this.scripts();?for(var c=0;c<b...

-----------------------------------------
}

[5]: setScriptBreakPointById [native debug.js:810] (this=0x1e2d0ffe4e99 <an Object>#4#,script_id=0x3427ac258f41 <String[4]: 1637>,opt_line=9,opt_column=0,opt_condition=0x1d3c143096e9 <String[0]:
,opt_groupId=0x1e2d0ff04121 <undefined>) {
  // expression stack (top to bottom)
  [06] : 0x1e2d0ff04121 <undefined>
  [05] : 0x1d3c143096e9 <String[0]: >
  [04] : 0
  [03] : 9
  [02] : 0x3427ac258f41 <String[4]: 1637>
  [01] : 0
  [00] : 0x1e2d0ffe4e99 <an Object>#4#
--------- s o u r c e   c o d e ---------
function (script_id,?opt_line,opt_column,?opt_condition,opt_groupId){?return this.setScriptBreakPoint(Debug.ScriptBreakPointType.ScriptId,?script_id,opt_line,opt_column,?opt_condition,opt_groupId);?}
-----------------------------------------
}

[6]: arguments adaptor frame: 4->5 {
  // actual arguments
  [00] : 0x3427ac258f41 <String[4]: 1637>
  [01] : 9
  [02] : 0
  [03] : 0x1d3c143096e9 <String[0]: >
}

[7]: /* anonymous */ [0x1e2d0ff04121 <undefined>:112] (this=0x1f5dcd1939c1 <JS Global Object>#5#,execState=0x3f2d9694aaa9 <an ExecutionState>#6#,args=0x3f2d9694a829 <an Object>#7#) {
  // stack-allocated locals
  var breakId = 0x1e2d0ff04121 <undefined>
  var locations = 0x1e2d0ff04121 <undefined>
  // expression stack (top to bottom)
  [06] : 0x1d3c143096e9 <String[0]: >
  [05] : 0
  [04] : 9
  [03] : 0x3427ac258f41 <String[4]: 1637>
  [02] : 0x1e2d0ffe4e99 <an Object>#4#
--------- s o u r c e   c o d e ---------
function (execState, args)?{? var breakId = Debug.setScriptBreakPointById(args.sourceID, args.lineNumber, args.columnNumber, args.condition);?? var locations = Debug.findBreakPointActualLocations(breakId);? if (!locations.length)? return undefined;? args.lineNumber = locations[0].line;? ...

-----------------------------------------
}

==== Key         ============================================

 #0# 0x1f5dcd1938b9: 0x1f5dcd1938b9 <JS Object>
 #1# 0xfc534f08459: 0xfc534f08459 <JS Object>
 #2# 0x3f2d9694aad1: 0x3f2d9694aad1 <a ScriptBreakPoint>
             type_: 0
          groupId_: 0x1e2d0ff04121 <undefined>
      ignoreCount_: 0
           number_: 17
           active_: 0x1e2d0ff04161 <true>
        hit_count_: 0
             line_: 9
        script_id_: 0x3427ac258f41 <String[4]: 1637>
           column_: 0
     break_points_: 0x3f2d9694ab41 <JS array[1]>#9#
        condition_: 0x1d3c143096e9 <String[0]: >
#3# 0x3f2d969b4259: 0x3f2d969b4259 <a Script value = 0x1e2d0ff97069 <Script>>
           value(): 0x1e2d0ff97069 <Script>#10#
 #4# 0x1e2d0ffe4e99: 0x1e2d0ffe4e99 <an Object>
        StepAction: 0x1e2d0ffa0b01 <an Object>#11#
ScriptCompilationType: 0xfc534fb6691 <an Object>#12#
          LiveEdit: 0x1d63ca14ade1 <JS Object>#13#
        DebugEvent: 0x1e2d0ff7f9a1 <an Object>#14#
    ExceptionBreak: 0x1e2d0ffa16f9 <an Object>#15#
        ScriptType: 0x1e2d0ffa0941 <an Object>#16#
ScriptBreakPointType: 0xfc534fb6c59 <an Object>#17#
 #5# 0x1f5dcd1939c1: 0x1f5dcd1939c1 <JS Global Object>
 #6# 0x3f2d9694aaa9: 0x3f2d9694aaa9 <an ExecutionState>
          break_id: 6241
    selected_frame: 0
 #7# 0x3f2d9694a829: 0x3f2d9694a829 <an Object>
          sourceID: 0x3427ac258f41 <String[4]: 1637>
         condition: 0x1d3c143096e9 <String[0]: >
        lineNumber: 9
      columnNumber: 0
 #8# 0x3f2d969b43b9: 0x3f2d969b43b9 <JS array[30]>
0: 0x3f2d969b3ff9 <a Script value = 0xfc534fdd7e1 <Script>>#18# 1: 0x3f2d969b4019 <a Script value = 0x1e2d0ff95c99 <Script>>#19# 2: 0x3f2d969b4039 <a Script value = 0x279b139d3161 <Script>>#20# 3: 0x3f2d969b4059 <a Script value = 0xfc534fd3f91 <Script>>#21# 4: 0x3f2d969b4079 <a Script value = 0x27d81ec543b1 <Script>>#22# 5: 0x3f2d969b4099 <a Script value = 0x1f5dcd1939e1 <Script>>#23# 6: 0x3f2d969b40b9 <a Script value = 0x1e2d0ff553f1 <Script>>#24# 7: 0x3f2d969b40d9 <a Script value = 0x2a258e3a6a81 <Script>>#25# 8: 0x3f2d969b40f9 <a Script value = 0x1e2d0ff6cb41 <Script>>#26# 9: 0x3f2d969b4119 <a Script value = 0x1e2d0ff96349 <Script>>#27#
                  ...
 #9# 0x3f2d9694ab41: 0x3f2d9694ab41 <JS array[1]>
                 0: 0x3f2d969b43d9 <a BreakPoint>#28#
 #10# 0x1e2d0ff97069: 0x1e2d0ff97069 <Script>
 #11# 0x1e2d0ffa0b01: 0x1e2d0ffa0b01 <an Object>
         StepInMin: 4
           StepMin: 3
          StepNext: 1
           StepOut: 0
            StepIn: 2
 #12# 0xfc534fb6691: 0xfc534fb6691 <an Object>
              Host: 0
              JSON: 2
              Eval: 1
 #13# 0x1d63ca14ade1: 0x1d63ca14ade1 <JS Object>
           TestApi: 0xfc534f52d19 <an Object>#29#
 #14# 0x1e2d0ff7f9a1: 0x1e2d0ff7f9a1 <an Object>
       NewFunction: 3
             Break: 1
     BeforeCompile: 4
      AfterCompile: 5
   ScriptCollected: 6
         Exception: 2
 #15# 0x1e2d0ffa16f9: 0x1e2d0ffa16f9 <an Object>
          Uncaught: 1
            Caught: 0
 #16# 0x1e2d0ffa0941: 0x1e2d0ffa0941 <an Object>
            Native: 0
         Extension: 1
            Normal: 2
 #17# 0xfc534fb6c59: 0xfc534fb6c59 <an Object>
        ScriptName: 1
          ScriptId: 0
      ScriptRegExp: 2
#18# 0x3f2d969b3ff9: 0x3f2d969b3ff9 <a Script value = 0xfc534fdd7e1 <Script>>
           value(): 0xfc534fdd7e1 <Script>#30#
#19# 0x3f2d969b4019: 0x3f2d969b4019 <a Script value = 0x1e2d0ff95c99 <Script>>
           value(): 0x1e2d0ff95c99 <Script>#31#
#20# 0x3f2d969b4039: 0x3f2d969b4039 <a Script value = 0x279b139d3161 <Script>>
           value(): 0x279b139d3161 <Script>#32#
#21# 0x3f2d969b4059: 0x3f2d969b4059 <a Script value = 0xfc534fd3f91 <Script>>
           value(): 0xfc534fd3f91 <Script>#33#
#22# 0x3f2d969b4079: 0x3f2d969b4079 <a Script value = 0x27d81ec543b1 <Script>>
           value(): 0x27d81ec543b1 <Script>#34#
#23# 0x3f2d969b4099: 0x3f2d969b4099 <a Script value = 0x1f5dcd1939e1 <Script>>
           value(): 0x1f5dcd1939e1 <Script>#35#
#24# 0x3f2d969b40b9: 0x3f2d969b40b9 <a Script value = 0x1e2d0ff553f1 <Script>>
           value(): 0x1e2d0ff553f1 <Script>#36#
#25# 0x3f2d969b40d9: 0x3f2d969b40d9 <a Script value = 0x2a258e3a6a81 <Script>>
           value(): 0x2a258e3a6a81 <Script>#37#
#26# 0x3f2d969b40f9: 0x3f2d969b40f9 <a Script value = 0x1e2d0ff6cb41 <Script>>
           value(): 0x1e2d0ff6cb41 <Script>#38#
#27# 0x3f2d969b4119: 0x3f2d969b4119 <a Script value = 0x1e2d0ff96349 <Script>>
           value(): 0x1e2d0ff96349 <Script>#39#
 #28# 0x3f2d969b43d9: 0x3f2d969b43d9 <a BreakPoint>
      ignoreCount_: 0
           active_: 0x1e2d0ff04161 <true>
        hit_count_: 0
   actual_location: 0x2b79e9f04a81 <an Object>#40#
  source_position_: 54
script_break_point_: 0x3f2d9694aad1 <a ScriptBreakPoint>#2#
        condition_: 0x1e2d0ff04101 <null>
 #29# 0xfc534f52d19: 0xfc534f52d19 <an Object>
     PosTranslator: 0x1d63ca14b209 <JS Function PosTranslator>#41#
ApplySingleChunkPatch: 0x1e2d0ffa0f39 <JS Function ApplySingleChunkPatch>#42#
    CompareStrings: 0x1e2d0ffa0ef1 <JS Function CompareStrings>#43#
 #30# 0xfc534fdd7e1: 0xfc534fdd7e1 <Script>
 #31# 0x1e2d0ff95c99: 0x1e2d0ff95c99 <Script>
 #32# 0x279b139d3161: 0x279b139d3161 <Script>
 #33# 0xfc534fd3f91: 0xfc534fd3f91 <Script>
 #34# 0x27d81ec543b1: 0x27d81ec543b1 <Script>
 #35# 0x1f5dcd1939e1: 0x1f5dcd1939e1 <Script>
 #36# 0x1e2d0ff553f1: 0x1e2d0ff553f1 <Script>
 #37# 0x2a258e3a6a81: 0x2a258e3a6a81 <Script>
 #38# 0x1e2d0ff6cb41: 0x1e2d0ff6cb41 <Script>
 #39# 0x1e2d0ff96349: 0x1e2d0ff96349 <Script>
 #40# 0x2b79e9f04a81: 0x2b79e9f04a81 <an Object>
            column: 4
         script_id: 1637
              line: 9
 #41# 0x1d63ca14b209: 0x1d63ca14b209 <JS Function PosTranslator>
 #42# 0x1e2d0ffa0f39: 0x1e2d0ffa0f39 <JS Function ApplySingleChunkPatch>
 #43# 0x1e2d0ffa0ef1: 0x1e2d0ffa0ef1 <JS Function CompareStrings>
=====================

[20407:20407:11989984054160:ERROR:process_util_posix.cc(138)] Received signal 6
        base::debug::StackTrace::StackTrace() [0x71bdce]
        base::(anonymous namespace)::StackDumpSignalHandler() [0x6d7965]
        0x7fd296e3aaf0
        0x7fd296e3aa75
        0x7fd296e3e5c0
        v8::internal::OS::Abort() [0xbbf8a1]
        V8_Fatal [0x8a3deb]
        CheckHelper() [0x874723]
        v8::internal::Code::allow_osr_at_loop_nesting_level() [0xaae9ba]
        v8::internal::RuntimeProfiler::OptimizeNow() [0xaae2ea]
        v8::internal::Execution::HandleStackGuardInterrupt() [0x8c848c]
        v8::internal::Runtime_StackGuard() [0xa5ea07]
        0x136dbb90420e

--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev

Reply via email to