Status: Assigned
Owner: [email protected]
CC: [email protected],  [email protected]
Labels: Type-Bug Priority-Medium

New issue 2533 by [email protected]: Flaky crash in inspector/profiler/heap-snapshot-comparison-show-next.html
http://code.google.com/p/v8/issues/detail?id=2533

Jochen saw this happen once on Chromiums WebKit builders. It might indicate a regression in our recent changes to LoadICs, so handing off to Toon. Someone seems to be patching generic ICs.

Builder Log: http://build.chromium.org/p/chromium.webkit/builders/WebKit%20Linux%20(dbg)/builds/5583 Flakiness Dashboard: http://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=inspector%2Fprofiler%2Fheap-snapshot-comparison-show-next.html&showExpectations=true

crash log for DumpRenderTree (pid 29005):
STDOUT:
STDOUT: ==== JS stack trace =========================================
STDOUT:
STDOUT: Security context: 0x35ce4e92a661 <String[7]: file://>
STDOUT: 1: override [0x71e51804121 <undefined>:368] (this=0x270e06f041a1 <an Object>#0#,receiver=0x1b82bf4fc059 <an Object>#1#,methodName=0x2f3e9a8b4531 <String[15]: getHeapSnapshot>,override=0x270e06f04159 <JS Function pushGeneratedSnapshot>#2#,opt_sticky=0x71e51804121 <undefined>)
STDOUT:     2: arguments adaptor frame: 3->4
STDOUT: 3: takeAndOpenSnapshot [0x71e51804121 <undefined>:1157] (this=0x270e06f041a1 <an Object>#0#,generator=0x270e06f042a9 <JS Function createHeapSnapshotA>#3#,callback=0x270e06f04261 <JS Function result>#4#) STDOUT: 4: testShowNext [0x71e51804121 <undefined>:30] (this=0x39c320938191 <JS Global Object>#5#,next=0x270e06f043d9 <JS Function runner>#6#)
STDOUT:     5: arguments adaptor frame: 2->1
STDOUT: 7: result [0x71e51804121 <undefined>:318] (this=0x39c320938191 <JS Global Object>#5#)
STDOUT:     8: arguments adaptor frame: 2->0
STDOUT: 9: runner [0x71e51804121 <undefined>:664] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 11: result [0x71e51804121 <undefined>:318] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 12: detailedHeapProfilesEnabled [0x71e51804121 <undefined>:611] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 13: profilerEnabled [0x71e51804121 <undefined>:600] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 14: startProfilerTest [0x71e51804121 <undefined>:615] (this=0x270e06f041a1 <an Object>#0#,callback=0x270e06f043d9 <JS Function runner>#6#) STDOUT: 15: runHeapSnapshotTestSuite [0x71e51804121 <undefined>:667] (this=0x270e06f041a1 <an Object>#0#,testSuite=0x270e06f04691 <JS Array[1]>#7#) STDOUT: 16: test [0x71e51804121 <undefined>:27] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 17: runTestInFrontend [0x71e51804121 <undefined>:10] (this=0x39c320938191 <JS Global Object>#5#,testFunction=0x270e06f046b1 <JS Function test>#8#,completeTestCallId=2) STDOUT: 18: /* anonymous */ [0x71e51804121 <undefined>:15] (this=0x39c320938191 <JS Global Object>#5#) STDOUT: 19: eval [native v8natives.js:180] (this=0x39c320938191 <JS Global Object>#5#,a=0x270e06f047d1 <Very long string[3348]>#9#) STDOUT: 20: invokeMethod [file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:47255] (this=0x2acb913baea1 <an InspectorBackendClass>#10#) STDOUT: 21: runAfterPendingDispatches [file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:4928] (this=0x2acb913baea1 <an InspectorBackendClass>#10#,script=0x71e51804121 <undefined>)
STDOUT:    22: arguments adaptor frame: 0->1
STDOUT: 23: dispatch [file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:4870] (this=0x2acb913baea1 <an InspectorBackendClass>#10#,message=0x270e06f05581 <String[228]: {"result":{"headers":[{"typeId":"CPU","uid":2,"title":"org.webkit.profiles.user-initiated.1"},{"typeId":"CPU","uid":4,"title":"outer"},{"typeId":"CPU","uid":5,"title":"inner"},{"typeId":"CPU","uid":3,"title":"titled"}]},"id":30}>) STDOUT: 24: dispatchMessage [file:///b/build/slave/WebKit_Linux__dbg_/build/src/out/Debug/resources/inspector/DevTools.js:5564] (this=0x1c0317f299b1 <an Object>#11#,messageObject=0x270e06f05581 <String[228]: {"result":{"headers":[{"typeId":"CPU","uid":2,"title":"org.webkit.profiles.user-initiated.1"},{"typeId":"CPU","uid":4,"title":"outer"},{"typeId":"CPU","uid":5,"title":"inner"},{"typeId":"CPU","uid":3,"title":"titled"}]},"id":30}>)
STDOUT:
STDOUT: ==== Details ================================================
STDOUT:

<--- snip --->

STDERR:
STDERR: #
STDERR: # Fatal error in ../../v8/src/ic.cc, line 981
STDERR: # unreachable code
STDERR: #
STDERR:
STDERR: ==== C stack trace ===============================
STDERR:
STDERR:  1: ??
STDERR:  2: ??
STDERR:  3: ??
STDERR:  4: ??
STDERR:  5: ??
STDERR:  6: ??
STDERR:  7: ??


--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to