Bug 42954 – REGRESSION: Reproducible crash when pausing in JS debugger

• Component: New Bugs
• Status: RESOLVED WORKSFORME

[meelash]

When attempting to pause in a freshly created cappuccino document-based application project, Safari crashes and hangs.

To reproduce:
Open index-debug.html in the attached folder test.zip
Develop>Start Debugging JavaScript
Turn on "Pause on Exception"

Safari will hang and crash.

If 
debugger;
is removed from line 22 of appController.j, the application will not crash.


This has been tested in the latest nightly build as well. On Chrome 5.0.375.99, it does not crash.

[meelash]

Created attachment 62538 [details]
test project

[Ryosuke Niwa]

Stack trace.

value->m_ptr is 0 in convertIfTerminal.

#0	0x1014d227a in JSC::JSCell::isString at JSCell.h:156
#1	0x101ed5151 in JSC::JSValue::isString at JSCell.h:182
#2	0x101ee1c62 in WebCore::SerializingTreeWalker::convertIfTerminal at SerializedScriptValue.cpp:557
#3	0x101ee297a in WebCore::walk<WebCore::SerializingTreeWalker> at SerializedScriptValue.cpp:405
#4	0x101ed011c in WebCore::SerializedScriptValueData::serialize at SerializedScriptValue.cpp:643
#5	0x101af17a0 in WebCore::SerializedScriptValue::create at SerializedScriptValue.h:181
#6	0x101eafa41 in WebCore::ScriptValue::serialize at ScriptValue.cpp:89
#7	0x10192b2f5 in WebCore::InjectedScript::callFrames at InjectedScript.cpp:73
#8	0x10194dcbd in WebCore::InspectorController::currentCallFrames at InspectorController.cpp:1790
#9	0x10194dd47 in WebCore::InspectorController::didPause at InspectorController.cpp:1880
#10	0x101e9e82d in WebCore::ScriptDebugServer::dispatchDidPause at ScriptDebugServer.cpp:261
#11	0x101e9e22a in WebCore::ScriptDebugServer::dispatchFunctionToListeners at ScriptDebugServer.cpp:354
#12	0x101e9e2f3 in WebCore::ScriptDebugServer::dispatchFunctionToListeners at ScriptDebugServer.cpp:366
#13	0x101e9ec31 in WebCore::ScriptDebugServer::pauseIfNeeded at ScriptDebugServer.cpp:447
#14	0x101e9ede4 in WebCore::ScriptDebugServer::didReachBreakpoint at ScriptDebugServer.cpp:560
#15	0x1007d36bc in JSC::Interpreter::debug at Interpreter.cpp:1134
#16	0x1007fa514 in cti_op_debug at JITStubs.cpp:3452
#17	0x1007f8f7f in WTF::doubleHash at HashTable.h:447
#18	0x1007d9448 in JSC::JITCode::execute at JITCode.h:77
#19	0x1007d4e66 in JSC::Interpreter::executeCall at Interpreter.cpp:780
#20	0x100790f75 in JSC::call at CallData.cpp:38
#21	0x1019c81c1 in WebCore::JSMainThreadExecState::call at JSMainThreadExecState.h:48
#22	0x101a5f050 in WebCore::JSEventListener::handleEvent at JSEventListener.cpp:124
#23	0x1017907d2 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:329
#24	0x101790df3 in WebCore::EventTarget::fireEventListeners at EventTarget.cpp:290
#25	0x101790f77 in WebCore::EventTarget::dispatchEvent at EventTarget.cpp:276
#26	0x1020850d3 in WebCore::XMLHttpRequestProgressEventThrottle::dispatchEvent at XMLHttpRequestProgressEventThrottle.cpp:81
#27	0x1020819ab in WebCore::XMLHttpRequest::callReadyStateChangeListener at XMLHttpRequest.cpp:287
#28	0x102081b8c in WebCore::XMLHttpRequest::changeState at XMLHttpRequest.cpp:270
#29	0x10208214f in WebCore::XMLHttpRequest::didFinishLoading at XMLHttpRequest.cpp:913
#30	0x10168c3cd in WebCore::DocumentThreadableLoader::didFinishLoading at DocumentThreadableLoader.cpp:245
#31	0x10168ca68 in WebCore::DocumentThreadableLoader::didFinishLoading at DocumentThreadableLoader.cpp:235
#32	0x101f26d7b in WebCore::SubresourceLoader::didFinishLoading at SubresourceLoader.cpp:183
#33	0x101e78ef2 in WebCore::ResourceLoader::didFinishLoading at ResourceLoader.cpp:443

[Brian Burg]

Please re-open if still reproduces.