Bug 140520

Summary:	[Win] Crash in 'inspector-protocol/debugger/setBreakpoint-dfg.html'
Product:	WebKit	Reporter:	Brent Fulgham <bfulgham>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	NEW
Severity:	Normal	CC:	bfulgham, mark.lam, msaboff, webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	528+ (Nightly build)
Hardware:	PC
OS:	All

Brent Fulgham

Reported 2015-01-15 15:46:47 PST

The layout test 'inspector-protocol/debugger/setBreakpoint-dfg.html' is crashing on Windows. Apparently the value we are working with is not (as expected) a JSScope The crash trace is: > WTF.dll!WTFCrashWithSecurityImplication() Line 335 C++ JavaScriptCore.dll!JSC::jsCast<JSC::JSScope *>(JSC::JSValue from) Line 249 C++ JavaScriptCore.dll!JSC::Register::scope() Line 239 C++ JavaScriptCore.dll!JSC::ExecState::scope(int scopeRegisterOffset) Line 50 C++ JavaScriptCore.dll!JSC::DebuggerCallFrame::scope() Line 149 C++ JavaScriptCore.dll!Inspector::ScriptDebugServer::exceptionOrCaughtValue(JSC::ExecState * state) Line 342 C++ JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchDidPause(Inspector::ScriptDebugListener * listener) Line 140 C++ JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(const WTF::HashSet<Inspector::ScriptDebugListener *,WTF::PtrHash<Inspector::ScriptDebugListener *>,WTF::HashTraits<Inspector::ScriptDebugListener *> > & listeners, void (Inspector::ScriptDebugListener *) * callback) Line 281 C++ JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(void (Inspector::ScriptDebugListener *) * callback) Line 274 C++ JavaScriptCore.dll!Inspector::ScriptDebugServer::handlePause(JSC::JSGlobalObject * vmEntryGlobalObject, JSC::Debugger::ReasonForPause __formal) Line 315 C++ JavaScriptCore.dll!JSC::Debugger::pauseIfNeeded(JSC::ExecState * callFrame) Line 679 C++ JavaScriptCore.dll!JSC::Debugger::updateCallFrameAndPauseIfNeeded(JSC::ExecState * callFrame) Line 635 C++ JavaScriptCore.dll!JSC::Debugger::atStatement(JSC::ExecState * callFrame) Line 715 C++ JavaScriptCore.dll!JSC::Interpreter::debug(JSC::ExecState * callFrame, JSC::DebugHookID debugHookID) Line 1228 C++ JavaScriptCore.dll!operationDebug(JSC::ExecState * exec, int debugHookID) Line 1005 C++ [External Code] [Frames below may be incorrect and/or missing] JavaScriptCore.dll!llint_entry() Line 7211 Unknown JavaScriptCore.dll!vmEntryToJavaScript() Line 109 Unknown JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77 C++ JavaScriptCore.dll!JSC::Interpreter::execute(JSC::EvalExecutable * eval, JSC::ExecState * callFrame, JSC::JSValue thisValue, JSC::JSScope * scope) Line 1201 C++ JavaScriptCore.dll!JSC::globalFuncEval(JSC::ExecState * exec) Line 527 C++ [External Code] JavaScriptCore.dll!llint_entry() Line 7178 Unknown JavaScriptCore.dll!llint_entry() Line 7178 Unknown JavaScriptCore.dll!llint_entry() Line 7178 Unknown JavaScriptCore.dll!vmEntryToJavaScript() Line 109 Unknown JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77 C++ JavaScriptCore.dll!JSC::Interpreter::executeCall(JSC::ExecState * callFrame, JSC::JSObject * function, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 978 C++ JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 39 C++ JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 44 C++ WebKit.dll!WebCore::JSMainThreadExecState::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 56 C++ WebKit.dll!WebCore::functionCallHandlerFromAnyThread(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 52 C++ JavaScriptCore.dll!Deprecated::ScriptFunctionCall::call(bool & hadException) Line 138 C++ JavaScriptCore.dll!Inspector::InjectedScriptBase::callFunctionWithEvalEnabled(Deprecated::ScriptFunctionCall & function, bool & hadException) Line 89 C++ JavaScriptCore.dll!Inspector::InjectedScriptBase::makeCall(Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::InspectorValue> * result) Line 108 C++ JavaScriptCore.dll!Inspector::InjectedScriptBase::makeEvalCall(WTF::String & errorString, Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * objectResult, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 121 C++ JavaScriptCore.dll!Inspector::InjectedScript::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String & objectGroup, bool includeCommandLineAPI, bool returnByValue, bool generatePreview, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * result, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 70 C++ JavaScriptCore.dll!Inspector::InspectorRuntimeAgent::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String * objectGroup, const bool * includeCommandLineAPI, const bool * doNotPauseOnExceptionsAndMuteConsole, const int * executionContextId, const bool * returnByValue, const bool * generatePreview, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> & result, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 132 C++ JavaScriptCore.dll!Inspector::InspectorRuntimeBackendDispatcher::evaluate(long callId, const Inspector::InspectorObject & message) Line 4274 C++ JavaScriptCore.dll!Inspector::InspectorRuntimeBackendDispatcher::dispatch(long callId, const WTF::String & method, WTF::Ref<Inspector::InspectorObject> && message) Line 4200 C++ JavaScriptCore.dll!Inspector::InspectorBackendDispatcher::dispatch(const WTF::String & message) Line 131 C++ WebKit.dll!WebCore::InspectorController::dispatchMessageFromFrontend(const WTF::String & message) Line 363 C++ WebKit.dll!WebCore::InspectorBackendDispatchTask::timerFired() Line 99 C++ [External Code] WebKit.dll!WebCore::Timer::fired() Line 133 C++ WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal() Line 135 C++ WebKit.dll!WebCore::ThreadTimers::sharedTimerFired() Line 108 C++ WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned int wParam, long lParam) Line 93 C++ [External Code] DumpRenderTree.dll!runTest(const std::basic_string<char,std::char_traits<char>,std::allocator<char> > & inputLine) Line 1132 C++ DumpRenderTree.dll!main(int argc, const char * * argv) Line 1476 C++ DumpRenderTree.dll!dllLauncherEntryPoint(int argc, const char * * argv) Line 1506 C++ DumpRenderTree.exe!main(int argc, const char * * argv) Line 239 C++ [External Code]

Attachments
Add attachment proposed patch, testcase, etc.

Radar WebKit Bug Importer

Comment 1 2015-02-05 10:22:28 PST

<rdar://problem/19731661>

Note You need to log in before you can comment on or make changes to this bug.