Status: New
Owner: ----

New issue 3189 by [email protected]: JS stack trace on Chromium GPU Linux maps test
http://code.google.com/p/v8/issues/detail?id=3189

We are seeing a couple of instances of the following V8 crash on the Linux Debug GPU running the maps test. This test runs a significant amount of the JavaScript from the new maps.google.com, so it represents a real-world use case.

Unfortunately this is very intermittent. It happened 2 times in the past 2 days.

Failing builds:
http://build.chromium.org/p/chromium.gpu/builders/Linux%20Release%20%28NVIDIA%29/builds/28831
http://build.chromium.org/p/chromium.gpu/builders/Linux%20Release%20%28NVIDIA%29/builds/28903


Log excerpt (full log attached).

Stacktrace (dead0000-dead0001) 0x19d53604141 0x2012aa404191:
==== JS stack trace =========================================

Security context: 0x2c4b76e2e8b1 <String[22]: http://localhost:10020>
1: fia [http://localhost:10020/tracked.js:113] (this=0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#) 2: wga [http://localhost:10020/tracked.js:112] (this=0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#) 3: eb(aka /* anonymous */) [http://localhost:10020/tracked.js:111] (this=0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#) 4: N$ [http://localhost:10020/tracked.js:107] (this=0x3f4f96afd6d1 <a gf with map 0x1fb2dc5d3a49>#1#,a=2,b=0x38adf56f82a9 <Number: 1393542188867.667>) 5: /* anonymous */ [http://localhost:10020/tracked.js:104] (this=0x3f4f96afd6d1 <a gf with map 0x1fb2dc5d3a49>#1#) 7: TX(aka b) [http://localhost:10020/tracked.js:56] (this=0x3f4f96afd6d1 <a gf with map 0x1fb2dc5d3a49>#1#) 8: dFa [http://localhost:10020/tracked.js:~99] (this=0x22a7ed422231 <a ef with map 0x1fb2dc57f881>#2#,a=0x19d53604181 <false>) 9: pha [http://localhost:10020/tracked.js:99] (this=0x22a7ed422231 <a ef with map 0x1fb2dc57f881>#2#,a=0x19d53604181 <false>) 10: /* anonymous */(aka /* anonymous */) [http://localhost:10020/tracked.js:~98] (this=0x19d53604121 <undefined>) 12: b(aka b) [http://localhost:10020/tracked.js:56] (this=0x19d53604121 <undefined>) 13: /* anonymous */ [http://localhost:10020/tracked.js:~97] (this=0x22a7ed4a56a1 <a MessagePort with map 0x1fb2dc571db1>#3#)
14: arguments adaptor frame: 1->0

==== Details ================================================

[1]: fia [http://localhost:10020/tracked.js:113] (this=0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#) {
// stack-allocated locals
var a = 0x19d53604141 <the hole>
// expression stack (top to bottom)
[02] : 0xf6e6aa074e9 <String[2]: FA>
[01] : 0x19d53604141 <the hole>
--------- s o u r c e   c o d e ---------
function (){for(var a=this.Wh.QI();a&&!a.FA;)a=this.Wh.QI();if(!a)return null;this.aI(a,!1);return a}
-----------------------------------------
}

[2]: wga [http://localhost:10020/tracked.js:112] (this=0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#) {
// stack-allocated locals
var a = 0x19d53604121 <undefined>
// expression stack (top to bottom)
[02] : 0x22a7ed430a29 <a nf with map 0x1fb2dc5d2b61>#0#
[01] : 0x1e127681a831 <JS Function f.fia (SharedFunctionInfo 0x327ed5584ff1)>#4#
--------- s o u r c e   c o d e ---------
function (){for(;this.ar<this.gaa;){var a=this.fia();if(!a)break;this.aJa(a)}this.YIa()}
-----------------------------------------
}



Attachments:
        maps_pixel_test_stdio.txt  65.1 KB

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to