REGRESSION(r181993): inspector-protocol/debugger/setBreakpoint-dfg-and-modify-local.html crashes on Windows

• Component: JavaScriptCore
• Status: RESOLVED DUPLICATE

[Mark Lam]

MSVC says that the crash trace (with r182015) is:

 	WTF.dll!WTFCrashWithSecurityImplication() Line 335
 	JavaScriptCore.dll!JSC::jsCast<JSC::JSScope *>(JSC::JSValue from) Line 250 JSCell.h
 	JavaScriptCore.dll!JSC::Register::scope() Line 239 JSScope.h
	JavaScriptCore.dll!JSC::ExecState::scope(int scopeRegisterOffset) Line 50 CallFrame.h
 	JavaScriptCore.dll!JSC::DebuggerCallFrame::scope() Line 149 DebuggerCallFrame.h
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::exceptionOrCaughtValue(JSC::ExecState * state) Line 340 ScriptDebugServer.cpp
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchDidPause(Inspector::ScriptDebugListener * listener) Line 138 ScriptDebugServer.cpp
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(const WTF::HashSet<Inspector::ScriptDebugListener *,WTF::PtrHash<Inspector::ScriptDebugListener *>,WTF::HashTraits<Inspector::ScriptDebugListener *> > & listeners, void (Inspector::ScriptDebugListener *) * callback) Line 279 ScriptDebugServer.cpp
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(void (Inspector::ScriptDebugListener *) * callback) Line 272 ScriptDebugServer.cpp
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::handlePause(JSC::JSGlobalObject * vmEntryGlobalObject, JSC::Debugger::ReasonForPause __formal) Line 313 ScriptDebugServer.cpp
 	JavaScriptCore.dll!JSC::Debugger::pauseIfNeeded(JSC::ExecState * callFrame) Line 679 Debugger.cpp
 	JavaScriptCore.dll!JSC::Debugger::updateCallFrameAndPauseIfNeeded(JSC::ExecState * callFrame) Line 635 Debugger.cpp
 	JavaScriptCore.dll!JSC::Debugger::atStatement(JSC::ExecState * callFrame) Line 715 Debugger.cpp
 	JavaScriptCore.dll!JSC::Interpreter::debug(JSC::ExecState * callFrame, JSC::DebugHookID debugHookID) Line 1167 Interpreter.cpp
 	JavaScriptCore.dll!llint_slow_path_debug(JSC::ExecState * exec, JSC::Instruction * pc) Line 1303 LLIntSlowPaths.cpp
 	JavaScriptCore.dll!llint_entry() Line 7646 LowLevelInterpreterWin.asm
 	[External Code]	
 	[Frames below may be incorrect and/or missing]	
 	JavaScriptCore.dll!llint_entry() Line 7279
 	JavaScriptCore.dll!llint_entry() Line 7279
 	JavaScriptCore.dll!vmEntryToJavaScript() Line 110
 	JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77
 	JavaScriptCore.dll!JSC::Interpreter::execute(JSC::EvalExecutable * eval, JSC::ExecState * callFrame, JSC::JSValue thisValue, JSC::JSScope * scope) Line 1140
 	JavaScriptCore.dll!JSC::globalFuncEval(JSC::ExecState * exec) Line 578	C++
 	[External Code]	
 	JavaScriptCore.dll!llint_entry() Line 7246	Unknown
 	JavaScriptCore.dll!llint_entry() Line 7246	Unknown
 	JavaScriptCore.dll!llint_entry() Line 7246	Unknown
 	JavaScriptCore.dll!vmEntryToJavaScript() Line 110	Unknown
 	JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77	C++
 	JavaScriptCore.dll!JSC::Interpreter::executeCall(JSC::ExecState * callFrame, JSC::JSObject * function, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 917
 	JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 39
 	JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 44
 	WebKit.dll!WebCore::JSMainThreadExecState::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 56
 	WebKit.dll!WebCore::functionCallHandlerFromAnyThread(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 52
 	JavaScriptCore.dll!Deprecated::ScriptFunctionCall::call(bool & hadException) Line 138
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::callFunctionWithEvalEnabled(Deprecated::ScriptFunctionCall & function, bool & hadException) Line 87
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::makeCall(Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::InspectorValue> * result) Line 106
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::makeEvalCall(WTF::String & errorString, Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * objectResult, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 119
 	JavaScriptCore.dll!Inspector::InjectedScript::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String & objectGroup, bool includeCommandLineAPI, bool returnByValue, bool generatePreview, bool saveResult, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * result, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 69
 	JavaScriptCore.dll!Inspector::InspectorRuntimeAgent::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String * objectGroup, const bool * includeCommandLineAPI, const bool * doNotPauseOnExceptionsAndMuteConsole, const int * executionContextId, const bool * returnByValue, const bool * generatePreview, const bool * saveResult, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> & result, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 129
 	JavaScriptCore.dll!Inspector::RuntimeBackendDispatcher::evaluate(long callId, const Inspector::InspectorObject & message) Line 4185
 	JavaScriptCore.dll!Inspector::RuntimeBackendDispatcher::dispatch(long callId, const WTF::String & method, WTF::Ref<Inspector::InspectorObject> && message) Line 4108
 	JavaScriptCore.dll!Inspector::BackendDispatcher::dispatch(const WTF::String & message) Line 129
 	WebKit.dll!WebCore::InspectorController::dispatchMessageFromFrontend(const WTF::String & message) Line 357
 	WebKit.dll!WebCore::InspectorBackendDispatchTask::timerFired() Line 96
 	[External Code]	
 	WebKit.dll!WebCore::Timer::fired() Line 133
 	WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal() Line 135
 	WebKit.dll!WebCore::ThreadTimers::sharedTimerFired() Line 108
 	WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned int wParam, long lParam) Line 93
 	[External Code]	
 	DumpRenderTree.dll!runTest(const std::basic_string<char,std::char_traits<char>,std::allocator<char> > & inputLine) Line 1141
 	DumpRenderTree.dll!main(int argc, const char * * argv) Line 1492
 	DumpRenderTree.dll!dllLauncherEntryPoint(int argc, const char * * argv) Line 1522
 	DumpRenderTree.exe!main(int argc, const char * * argv) Line 248
 	[External Code]

[Alexey Proskuryakov]

*** This bug has been marked as a duplicate of bug 143105 ***