Bug 167412

Summary:

STP20 hangs inside Heap::stopIfNecessarySlow

Product:

WebKit

Reporter:

Ryosuke Niwa <rniwa>

Component:

JavaScriptCore

Assignee:

Nobody <webkit-unassigned>

Status:

NEW

Severity:

Normal

CC:

fpizlo, ggaren

Priority:

Version:

Safari Technology Preview

Hardware:

Unspecified

OS:

Unspecified

Attachments:

Description	Flags
Sample	none

Ryosuke Niwa

Reported 2017-01-25 00:23:10 PST

Call graph: 2669 Thread_8164961 DispatchQueue_1: com.apple.main-thread (serial) + 2669 start (in libdyld.dylib) + 1 [0x7fffd879e255] + 2669 ??? (in com.apple.WebKit.WebContent) load address 0x10bcdb000 + 0x17a2 [0x10bcdc7a2] + 2669 xpc_main (in libxpc.dylib) + 494 [0x7fffd8a012e4] + 2669 _xpc_objc_main (in libxpc.dylib) + 775 [0x7fffd8a028c7] + 2669 NSApplicationMain (in AppKit) + 1237 [0x7fffc0c90d80] + 2669 -[NSApplication run] (in AppKit) + 926 [0x7fffc0cc6465] + 2669 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] (in AppKit) + 2789 [0x7fffc144c21f] + 2669 _DPSNextEvent (in AppKit) + 1120 [0x7fffc0cd1ae4] + 2669 _BlockUntilNextEventMatchingListInModeWithFilter (in HIToolbox) + 71 [0x7fffc272b736] + 2669 ReceiveNextEventCommon (in HIToolbox) + 432 [0x7fffc272b901] + 2669 RunCurrentEventLoopInMode (in HIToolbox) + 240 [0x7fffc272bacc] + 2669 CFRunLoopRunSpecific (in CoreFoundation) + 420 [0x7fffc31a0b54] + 2669 __CFRunLoopRun (in CoreFoundation) + 2081 [0x7fffc31a15d1] + 2669 __CFRunLoopDoTimers (in CoreFoundation) + 298 [0x7fffc31a9a7a] + 2669 __CFRunLoopDoTimer (in CoreFoundation) + 1075 [0x7fffc31a9f23] + 2669 __CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION__ (in CoreFoundation) + 20 [0x7fffc31aa294] + 2669 WebCore::timerFired(__CFRunLoopTimer*, void*) (in WebCore) + 31 [0x10d62c5ef] + 2669 WebCore::ThreadTimers::sharedTimerFiredInternal() (in WebCore) + 176 [0x10d62c6b0] + 2669 WebCore::DOMTimer::fired() (in WebCore) + 332 [0x10d705cfc] + 2669 WebCore::ScheduledAction::execute(WebCore::Document&) (in WebCore) + 134 [0x10e56bd26] + 2669 WebCore::ScheduledAction::executeFunctionInContext(JSC::JSGlobalObject*, JSC::JSValue, WebCore::ScriptExecutionContext&) (in WebCore) + 604 [0x10e56c11c] + 2669 JSC::profiledCall(JSC::ExecState*, JSC::ProfilingReason, JSC::JSValue, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&, WTF::NakedPtr<JSC::Exception>&) (in JavaScriptCore) + 197 [0x10cb33885] + 2669 JSC::Interpreter::executeCall(JSC::ExecState*, JSC::JSObject*, JSC::CallType, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) (in JavaScriptCore) + 505 [0x10c7fa7e9] + 2669 JSC::JITCode::execute(JSC::VM*, JSC::ProtoCallFrame*) (in JavaScriptCore) + 190 [0x10cf4209e] + 2669 vmEntryToJavaScript (in JavaScriptCore) + 299 [0x10d0806db] + 2669 ??? (in <unknown binary>) [0x3228a317a845] + 2669 ??? (in <unknown binary>) [0x3228a2f915c6] + 2669 ??? (in <unknown binary>) [0x3228a371a72d] + 2669 ??? (in <unknown binary>) [0x3228a24efd1d] + 2669 ??? (in <unknown binary>) [0x3228a2f915c6] + 2669 ??? (in <unknown binary>) [0x3228a32ee7fc] + 2669 ??? (in <unknown binary>) [0x3228a32684f2] + 2669 ??? (in <unknown binary>) [0x3228e22003c1] + 2669 ??? (in <unknown binary>) [0x3228a2c0fed6] + 2669 ??? (in <unknown binary>) [0x3228a35fcd45] + 2669 ??? (in <unknown binary>) [0x3228a23ad878] + 2669 ??? (in <unknown binary>) [0x3228a2201028] + 2669 JSC::arrayProtoFuncUnShift(JSC::ExecState*) (in JavaScriptCore) + 669 [0x10ca7a18d] + 2669 void JSC::unshift<(JSC::JSArray::ShiftCountMode)0>(JSC::ExecState*, JSC::JSObject*, unsigned int, unsigned int, unsigned int, unsigned int) (in JavaScriptCore) + 223 [0x10c8bcb8f] + 2669 JSC::JSArray::unshiftCountWithArrayStorage(JSC::ExecState*, unsigned int, unsigned int, JSC::ArrayStorage*) (in JavaScriptCore) + 995 [0x10c8bd7b3] + 2669 JSC::Heap::decrementDeferralDepthAndGCIfNeeded() (in JavaScriptCore) + 105 [0x10ce827d9] + 2669 JSC::Heap::stopIfNecessarySlow() (in JavaScriptCore) + 47 [0x10ce81a6f] + 2669 JSC::Heap::stopIfNecessarySlow(unsigned int) (in JavaScriptCore) + 252 [0x10ce81bec] + 2669 WTF::ParkingLot::parkConditionallyImpl(void const*, WTF::ScopedLambda<bool ()> const&, WTF::ScopedLambda<void ()> const&, WTF::TimeWithDynamicClockType const&) (in JavaScriptCore) + 2706 [0x10d2bf332] + 2669 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) (in JavaScriptCore) + 63 [0x10c7ccecf] + 2669 _pthread_cond_wait (in libsystem_pthread.dylib) + 712 [0x7fffd89b696a] + 2669 __psynch_cvwait (in libsystem_kernel.dylib) + 10 [0x7fffd88ccc86]

Attachments
Sample (100.83 KB, text/plain) 2017-01-25 00:23 PST, Ryosuke Niwa	no flags	Details
View All Add attachment proposed patch, testcase, etc.

Ryosuke Niwa

Comment 1 2017-01-25 00:23:29 PST

Created attachment 299685 [details] Sample

Ryosuke Niwa

Comment 2 2017-01-25 00:23:58 PST

Maybe this has already been fixed?

Note You need to log in before you can comment on or make changes to this bug.