Bug 143109

Summary:	REGRESSION(r181993): inspector-protocol/debugger/setBreakpoint-dfg-and-modify-local.html crashes on Windows
Product:	WebKit	Reporter:	Mark Lam <mark.lam>
Component:	JavaScriptCore	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal
Priority:	P2
Version:	528+ (Nightly build)
Hardware:	Unspecified
OS:	Unspecified

Mark Lam

Reported 2015-03-26 12:01:39 PDT

MSVC says that the crash trace (with r182015) is: WTF.dll!WTFCrashWithSecurityImplication() Line 335 JavaScriptCore.dll!JSC::jsCast<JSC::JSScope *>(JSC::JSValue from) Line 250 JSCell.h JavaScriptCore.dll!JSC::Register::scope() Line 239 JSScope.h JavaScriptCore.dll!JSC::ExecState::scope(int scopeRegisterOffset) Line 50 CallFrame.h JavaScriptCore.dll!JSC::DebuggerCallFrame::scope() Line 149 DebuggerCallFrame.h JavaScriptCore.dll!Inspector::ScriptDebugServer::exceptionOrCaughtValue(JSC::ExecState * state) Line 340 ScriptDebugServer.cpp JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchDidPause(Inspector::ScriptDebugListener * listener) Line 138 ScriptDebugServer.cpp JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(const WTF::HashSet<Inspector::ScriptDebugListener *,WTF::PtrHash<Inspector::ScriptDebugListener *>,WTF::HashTraits<Inspector::ScriptDebugListener *> > & listeners, void (Inspector::ScriptDebugListener *) * callback) Line 279 ScriptDebugServer.cpp JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(void (Inspector::ScriptDebugListener *) * callback) Line 272 ScriptDebugServer.cpp JavaScriptCore.dll!Inspector::ScriptDebugServer::handlePause(JSC::JSGlobalObject * vmEntryGlobalObject, JSC::Debugger::ReasonForPause __formal) Line 313 ScriptDebugServer.cpp JavaScriptCore.dll!JSC::Debugger::pauseIfNeeded(JSC::ExecState * callFrame) Line 679 Debugger.cpp JavaScriptCore.dll!JSC::Debugger::updateCallFrameAndPauseIfNeeded(JSC::ExecState * callFrame) Line 635 Debugger.cpp JavaScriptCore.dll!JSC::Debugger::atStatement(JSC::ExecState * callFrame) Line 715 Debugger.cpp JavaScriptCore.dll!JSC::Interpreter::debug(JSC::ExecState * callFrame, JSC::DebugHookID debugHookID) Line 1167 Interpreter.cpp JavaScriptCore.dll!llint_slow_path_debug(JSC::ExecState * exec, JSC::Instruction * pc) Line 1303 LLIntSlowPaths.cpp JavaScriptCore.dll!llint_entry() Line 7646 LowLevelInterpreterWin.asm [External Code] [Frames below may be incorrect and/or missing] JavaScriptCore.dll!llint_entry() Line 7279 JavaScriptCore.dll!llint_entry() Line 7279 JavaScriptCore.dll!vmEntryToJavaScript() Line 110 JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77 JavaScriptCore.dll!JSC::Interpreter::execute(JSC::EvalExecutable * eval, JSC::ExecState * callFrame, JSC::JSValue thisValue, JSC::JSScope * scope) Line 1140 JavaScriptCore.dll!JSC::globalFuncEval(JSC::ExecState * exec) Line 578 C++ [External Code] JavaScriptCore.dll!llint_entry() Line 7246 Unknown JavaScriptCore.dll!llint_entry() Line 7246 Unknown JavaScriptCore.dll!llint_entry() Line 7246 Unknown JavaScriptCore.dll!vmEntryToJavaScript() Line 110 Unknown JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77 C++ JavaScriptCore.dll!JSC::Interpreter::executeCall(JSC::ExecState * callFrame, JSC::JSObject * function, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 917 JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 39 JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 44 WebKit.dll!WebCore::JSMainThreadExecState::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 56 WebKit.dll!WebCore::functionCallHandlerFromAnyThread(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 52 JavaScriptCore.dll!Deprecated::ScriptFunctionCall::call(bool & hadException) Line 138 JavaScriptCore.dll!Inspector::InjectedScriptBase::callFunctionWithEvalEnabled(Deprecated::ScriptFunctionCall & function, bool & hadException) Line 87 JavaScriptCore.dll!Inspector::InjectedScriptBase::makeCall(Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::InspectorValue> * result) Line 106 JavaScriptCore.dll!Inspector::InjectedScriptBase::makeEvalCall(WTF::String & errorString, Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * objectResult, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 119 JavaScriptCore.dll!Inspector::InjectedScript::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String & objectGroup, bool includeCommandLineAPI, bool returnByValue, bool generatePreview, bool saveResult, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * result, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 69 JavaScriptCore.dll!Inspector::InspectorRuntimeAgent::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String * objectGroup, const bool * includeCommandLineAPI, const bool * doNotPauseOnExceptionsAndMuteConsole, const int * executionContextId, const bool * returnByValue, const bool * generatePreview, const bool * saveResult, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> & result, Inspector::Protocol::OptOutput<bool> * wasThrown, Inspector::Protocol::OptOutput<int> * savedResultIndex) Line 129 JavaScriptCore.dll!Inspector::RuntimeBackendDispatcher::evaluate(long callId, const Inspector::InspectorObject & message) Line 4185 JavaScriptCore.dll!Inspector::RuntimeBackendDispatcher::dispatch(long callId, const WTF::String & method, WTF::Ref<Inspector::InspectorObject> && message) Line 4108 JavaScriptCore.dll!Inspector::BackendDispatcher::dispatch(const WTF::String & message) Line 129 WebKit.dll!WebCore::InspectorController::dispatchMessageFromFrontend(const WTF::String & message) Line 357 WebKit.dll!WebCore::InspectorBackendDispatchTask::timerFired() Line 96 [External Code] WebKit.dll!WebCore::Timer::fired() Line 133 WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal() Line 135 WebKit.dll!WebCore::ThreadTimers::sharedTimerFired() Line 108 WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned int wParam, long lParam) Line 93 [External Code] DumpRenderTree.dll!runTest(const std::basic_string<char,std::char_traits<char>,std::allocator<char> > & inputLine) Line 1141 DumpRenderTree.dll!main(int argc, const char * * argv) Line 1492 DumpRenderTree.dll!dllLauncherEntryPoint(int argc, const char * * argv) Line 1522 DumpRenderTree.exe!main(int argc, const char * * argv) Line 248 [External Code]

Attachments
Add attachment proposed patch, testcase, etc.

Alexey Proskuryakov

Comment 1 2015-03-26 13:44:21 PDT

*** This bug has been marked as a duplicate of bug 143105 ***

Note You need to log in before you can comment on or make changes to this bug.