Status: New
Owner: ----
New issue 3028 by [email protected]: d8 crash in GetTypeName
http://code.google.com/p/v8/issues/detail?id=3028
When running the attached script, d8 crashed. I cannot reproduce the crash.
V8 version 3.22.24.6
The exact binary used is the one available from here:
https://code.google.com/p/dart/source/browse/third_party/d8/macos/d8?spec=svn30720&r=30465
stdout:
unittest-suite-wait-for-done
PASS: PathObserver Degenerate Values
PASS: PathObserver get value at path ObservableBox
PASS: PathObserver get value at path ObservableMap
PASS: PathObserver set value at path
PASS: PathObserver set value back to same
PASS: PathObserver Observe and Unobserve - Paths
PASS: PathObserver Path Value With Indices
PASS: PathObserver Path Observation - TestModel
PASS: PathObserver Path Observation - WatcherModel
PASS: PathObserver observe map
PASS: PathObserver errors thrown from getter/setter
stderr:
Stacktrace (dead0000-dead0001) 0x56a080a1 0x30008121:
==== JS stack trace =========================================
Security context: 0x4b118fc5 <JS Object>#0#
1: GetTypeName [native messages.js:1128] (this=0x4b108545 <JS
Object>#1#,a=0x56a080a1 <FixedArray[0]>#2#,b=0x39d080b1 <true>)
2: toString(aka CallSiteToString) [native messages.js:968]
(this=0x3d133d1d <a CallSite with map 0x5ac31e09>#3#)
3: FormatStackTrace [native messages.js:1112] (this=0x4b108545 <JS
Object>#1#,a=0x3d12be2d <an Error with map 0x5ac319a9>#4#,b=0x56a11545
<String[5]: Error>,c=0x3d133905 <JS Array[12]>#5#)
4: /* anonymous */ [native messages.js:1159] (this=0x3d12be2d <an Error
with map 0x5ac319a9>#4#)
8: toString$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:2939]
(this=0x3d12c931 <a _StackTrace with map 0x5ac31139>#6#,_=0x3d12c931 <a
_StackTrace with map 0x5ac31139>#6#)
9: call$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16006]
(this=0x3d12d59d <a Trace_Trace$from_closure with map 0x5ac31a99>#7#)
10: _thunk$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:12723]
(this=0x3d12d5f9 <a LazyTrace with map 0x5ac31b11>#8#)
11: get$_lazy_trace$_trace
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:12728]
(this=0x3d12d5f9 <a LazyTrace with map 0x5ac31b11>#8#)
12: toString$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:12737]
(this=0x3d12d5f9 <a LazyTrace with map 0x5ac31b11>#8#,_=0x3d12d5f9 <a
LazyTrace with map 0x5ac31b11>#8#)
13: toString$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:17097]
(this=0x4b1811c1 <a dart with map 0x5ac25d89>#9#,receiver=0x3d12d5f9 <a
LazyTrace with map 0x5ac31b11>#8#)
14: formatResult$1
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16357]
(this=0x59fb1a19 <a SimpleConfiguration with map
0x5ac290c9>#10#,testCase=0x59fc99ad <a TestCase with map 0x5ac29d99>#11#)
15: onSummary$5
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16369]
(this=0x59fb1a19 <a SimpleConfiguration with map
0x5ac290c9>#10#,passed=12,failed=1,errors=0,results=0x59fb1795 <an
UnmodifiableListView with map 0x5ac29af1>#12#,uncaughtError=0x39d08081
<null>)
16: _completeTests
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16222]
(this=0x4b1811d9 <a dart with map 0x5ac19151>#13#)
17: _runTest
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16182]
(this=0x4b1811d9 <a dart with map 0x5ac19151>#13#)
18: call$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:16140]
(this=0x59f7e129 <a TearOffClosure with map 0x5ac296b9>#14#)
19: call$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:5647]
(this=0x3d008771 <a TearOffClosure with map 0x5ac296b9>#15#)
20: call$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1846]
(this=0x3d00878d <a TimerImpl_internalCallback with map 0x5ac29821>#16#)
21: eval$1
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1240]
(this=0x3d0087c1 <a _IsolateContext with map
0x5ac28dd1>#17#,code=0x3d00878d <a TimerImpl_internalCallback with map
0x5ac29821>#16#)
22: process$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1351]
(this=0x3d0087f9 <a _IsolateEvent with map 0x5ac298c1>#18#)
23: runIteration$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1312]
(this=0x3d008831 <a _EventLoop with map 0x5ac28b51>#19#)
24: _runHelper$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1319]
(this=0x3d008831 <a _EventLoop with map 0x5ac28b51>#19#)
25: run$0
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1325]
(this=0x3d008831 <a _EventLoop with map 0x5ac28b51>#19#)
26: startRootIsolate
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:1022]
(this=0x4b1811b5 <a dart with map 0x5ac12801>#20#,entry=0x3d008865 <a
TearOffClosure with deprecated map 0x5ac286c9>#21#)
27: /* anonymous */
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:17576]
(this=0x4b119061 <JS Global Object>#22#,currentScript=0x39d08081 <null>)
28: /* anonymous */
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:17552]
(this=0x4b119061 <JS Global Object>#22#,callback=0x3d008899 <JS Function
(SharedFunctionInfo 0x4b161ab5)>#23#)
29: /* anonymous */
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:17570]
(this=0x4b119061 <JS Global Object>#22#,$=0x39d08091 <undefined>)
30: arguments adaptor frame: 0->1
31: /* anonymous */
[/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:17837]
(this=0x4b119061 <JS Global Object>#22#)
==== Details ================================================
[1]: GetTypeName [native messages.js:1128] (this=0x4b108545 <JS
Object>#1#,a=0x56a080a1 <FixedArray[0]>#2#,b=0x39d080b1 <true>) {
// stack-allocated locals
var c = 0x39d08091 <undefined>
var d = 0x39d08091 <undefined>
// expression stack (top to bottom)
[03] : 0x56a0fe79 <String[11]: constructor>
[02] : 0x56a080a1 <FixedArray[0]>#2#
--------- s o u r c e c o d e ---------
function GetTypeName(a,b){?var c=a.constructor;?if(!c){?return
b?null:?%_CallFunction(a,ObjectToString);?}?var d=c.name;?if(!d){?return
b?null:?%_CallFunction(a,ObjectToString);?}?return d;?}
-----------------------------------------
}
[2]: toString(aka CallSiteToString) [native messages.js:968]
(this=0x3d133d1d <a CallSite with map 0x5ac31e09>#3#) {
// stack-allocated locals
var a = 0x2f9bb2a1 <String[121]:
/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js>
var b = 0x3d14a185 <String[129]:
/Users/ahe/Dart/all/dart/xcodebuild/ReleaseIA32/generated_compilations/dart2js/pkg_observe_test_path_observer_test/out.js:7677:53>
var c = 7677
var d = 53
var g = 0x56a0c6bd <String[0]: >
var h = 0x4b175abd <String[19]: _ZoneDelegate.run$2>
var i = 0x39d080b1 <true>
var j = 0x39d080c1 <false>
var k = 0x39d080b1 <true>
var l = 0x39d08091 <undefined>
var m = 0x39d08091 <undefined>
// expression stack (top to bottom)
[13] : 0x39d080b1 <true>
[12] : 0x56a080a1 <FixedArray[0]>#2#
[11] : 0x4b108545 <JS Object>#1#
--------- s o u r c e c o d e ---------
function CallSiteToString(){?var a;?var
b="";?if(this.isNative()){?b="native";?}else{?if(this.isEval()){?a=this.getScriptNameOrSourceURL();?if(!a){?b=this.getEvalOrigin();?b+=", ";?}?}else{?a=this.getFileName();?}??if(a){?b+=a;?}else{????b+="<anonymous>";?}?var
c=this.getLineNumber();?if(c!=null){?b+=":"+c;?var d=this.getCo...
-----------------------------------------
}
[3]: FormatStackTrace [native messages.js:1112] (this=0x4b108545 <JS
Object>#1#,a=0x3d12be2d <an Error with map 0x5ac319a9>#4#,b=0x56a11545
<String[5]: Error>,c=0x3d133905 <JS Array[12]>#5#) {
// stack-alloca
Attachments:
out.js 657 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings
--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
---
You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
