Status: Assigned
Owner: [email protected]
CC: [email protected], [email protected]
Labels: Type-Bug Priority-Medium
New issue 2533 by [email protected]: Flaky crash in
inspector/profiler/heap-snapshot-comparison-show-next.html
http://code.google.com/p/v8/issues/detail?id=2533
Jochen saw this happen once on Chromiums WebKit builders. It might indicate
a regression in our recent changes to LoadICs, so handing off to Toon.
Someone seems to be patching generic ICs.
Builder Log:
http://build.chromium.org/p/chromium.webkit/builders/WebKit%20Linux%20(dbg)/builds/5583
Flakiness Dashboard:
http://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=inspector%2Fprofiler%2Fheap-snapshot-comparison-show-next.html&showExpectations=true
crash log for DumpRenderTree (pid 29005):
STDOUT:
STDOUT: ==== JS stack trace =========================================
STDOUT:
STDOUT: Security context: 0x35ce4e92a661 <String[7]: file://>
STDOUT: 1: override [0x71e51804121 <undefined>:368]
(this=0x270e06f041a1 <an Object>#0#,receiver=0x1b82bf4fc059 <an
Object>#1#,methodName=0x2f3e9a8b4531 <String[15]:
getHeapSnapshot>,override=0x270e06f04159 <JS Function
pushGeneratedSnapshot>#2#,opt_sticky=0x71e51804121 <undefined>)
STDOUT: 2: arguments adaptor frame: 3->4
STDOUT: 3: takeAndOpenSnapshot [0x71e51804121 <undefined>:1157]
(this=0x270e06f041a1 <an Object>#0#,generator=0x270e06f042a9 <JS Function
createHeapSnapshotA>#3#,callback=0x270e06f04261 <JS Function result>#4#)
STDOUT: 4: testShowNext [0x71e51804121 <undefined>:30]
(this=0x39c320938191 <JS Global Object>#5#,next=0x270e06f043d9 <JS Function
runner>#6#)
STDOUT: 5: arguments adaptor frame: 2->1
STDOUT: 7: result [0x71e51804121 <undefined>:318] (this=0x39c320938191
<JS Global Object>#5#)
STDOUT: 8: arguments adaptor frame: 2->0
STDOUT: 9: runner [0x71e51804121 <undefined>:664] (this=0x39c320938191
<JS Global Object>#5#)
STDOUT: 11: result [0x71e51804121 <undefined>:318] (this=0x39c320938191
<JS Global Object>#5#)
STDOUT: 12: detailedHeapProfilesEnabled [0x71e51804121 <undefined>:611]
(this=0x39c320938191 <JS Global Object>#5#)
STDOUT: 13: profilerEnabled [0x71e51804121 <undefined>:600]
(this=0x39c320938191 <JS Global Object>#5#)
STDOUT: 14: startProfilerTest [0x71e51804121 <undefined>:615]
(this=0x270e06f041a1 <an Object>#0#,callback=0x270e06f043d9 <JS Function
runner>#6#)
STDOUT: 15: runHeapSnapshotTestSuite [0x71e51804121 <undefined>:667]
(this=0x270e06f041a1 <an Object>#0#,testSuite=0x270e06f04691 <JS
Array[1]>#7#)
STDOUT: 16: test [0x71e51804121 <undefined>:27] (this=0x39c320938191 <JS
Global Object>#5#)
STDOUT: 17: runTestInFrontend [0x71e51804121 <undefined>:10]
(this=0x39c320938191 <JS Global Object>#5#,testFunction=0x270e06f046b1 <JS
Function test>#8#,completeTestCallId=2)
STDOUT: 18: /* anonymous */ [0x71e51804121 <undefined>:15]
(this=0x39c320938191 <JS Global Object>#5#)
STDOUT: 19: eval [native v8natives.js:180] (this=0x39c320938191 <JS
Global Object>#5#,a=0x270e06f047d1 <Very long string[3348]>#9#)
STDOUT: 20: invokeMethod
[file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:47255]
(this=0x2acb913baea1 <an InspectorBackendClass>#10#)
STDOUT: 21: runAfterPendingDispatches
[file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:4928]
(this=0x2acb913baea1 <an InspectorBackendClass>#10#,script=0x71e51804121
<undefined>)
STDOUT: 22: arguments adaptor frame: 0->1
STDOUT: 23: dispatch
[file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:4870]
(this=0x2acb913baea1 <an InspectorBackendClass>#10#,message=0x270e06f05581
<String[228]:
{"result":{"headers":[{"typeId":"CPU","uid":2,"title":"org.webkit.profiles.user-initiated.1"},{"typeId":"CPU","uid":4,"title":"outer"},{"typeId":"CPU","uid":5,"title":"inner"},{"typeId":"CPU","uid":3,"title":"titled"}]},"id":30}>)
STDOUT: 24: dispatchMessage
[file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:5564]
(this=0x1c0317f299b1 <an Object>#11#,messageObject=0x270e06f05581
<String[228]:
{"result":{"headers":[{"typeId":"CPU","uid":2,"title":"org.webkit.profiles.user-initiated.1"},{"typeId":"CPU","uid":4,"title":"outer"},{"typeId":"CPU","uid":5,"title":"inner"},{"typeId":"CPU","uid":3,"title":"titled"}]},"id":30}>)
STDOUT:
STDOUT: ==== Details ================================================
STDOUT:
<--- snip --->
STDERR:
STDERR: #
STDERR: # Fatal error in ../../v8/src/ic.cc, line 981
STDERR: # unreachable code
STDERR: #
STDERR:
STDERR: ==== C stack trace ===============================
STDERR:
STDERR: 1: ??
STDERR: 2: ??
STDERR: 3: ??
STDERR: 4: ??
STDERR: 5: ??
STDERR: 6: ??
STDERR: 7: ??
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.