Bug 82900 – inspector/profiler/heap-snapshot-inspect-dom-wrapper.html crashes in debug mode

• Component: Web Inspector (Deprecated)
• Status: RESOLVED INVALID

[Yury Semikhatsky]

#
# Fatal error in ../../v8/src/profile-generator.cc, line 2089
# CHECK(idx == scope_info->FunctionContextSlotIndex(name, &mode)) failed
#


Program received signal SIGTRAP, Trace/breakpoint trap.
v8::internal::OS::DebugBreak () at ../../v8/src/platform-linux.cc:410
410	}
(gdb) bt
#0  v8::internal::OS::DebugBreak () at ../../v8/src/platform-linux.cc:410
#1  0x0000000001ac5eb9 in v8::internal::OS::Abort () at ../../v8/src/platform-linux.cc:392
#2  0x0000000001771723 in V8_Fatal (file=0x3fa2e08 "../../v8/src/profile-generator.cc", line=2089, format=0x3fa2220 "CHECK(%s) failed")
    at ../../v8/src/checks.cc:58
#3  0x000000000192107d in v8::internal::V8HeapExplorer::ExtractClosureReferences (this=0x7fffffffc268, js_obj=0x211b902d3729, entry=0x1)
    at ../../v8/src/profile-generator.cc:2089
#4  0x000000000192006e in v8::internal::V8HeapExplorer::ExtractReferences (this=0x7fffffffc268, obj=0x211b902d3729)
    at ../../v8/src/profile-generator.cc:1889
#5  0x000000000192196b in v8::internal::V8HeapExplorer::IterateAndExtractReferences (this=0x7fffffffc268, filler=0x7fffffffc1b0)
    at ../../v8/src/profile-generator.cc:2317
#6  0x00000000019241f5 in v8::internal::HeapSnapshotGenerator::CountEntriesAndReferences (this=0x7fffffffc250)
    at ../../v8/src/profile-generator.cc:3148
#7  0x0000000001923f1b in v8::internal::HeapSnapshotGenerator::GenerateSnapshot (this=0x7fffffffc250) at ../../v8/src/profile-generator.cc:3091
#8  0x0000000001807f0e in v8::internal::HeapProfiler::TakeSnapshotImpl (this=0x7fffee56a720, 
    name=0x7fffe919c210 "org.webkit.profiles.user-initiated.1", type=0, control=0x7fffffffc4b0) at ../../v8/src/heap-profiler.cc:118
#9  0x0000000001807fe1 in v8::internal::HeapProfiler::TakeSnapshotImpl (this=0x7fffee56a720, name=0x1c3c85ff5a71, type=0, control=0x7fffffffc4b0)
    at ../../v8/src/heap-profiler.cc:136
#10 0x0000000001807d06 in v8::internal::HeapProfiler::TakeSnapshot (name=0x1c3c85ff5a71, type=0, control=0x7fffffffc4b0)
    at ../../v8/src/heap-profiler.cc:85
#11 0x0000000001740039 in v8::HeapProfiler::TakeSnapshot (title=..., type=v8::HeapSnapshot::kFull, control=0x7fffffffc4b0)
    at ../../v8/src/api.cc:6216
#12 0x00000000009e0010 in WebCore::ScriptProfiler::takeHeapSnapshot (title=..., control=0x7fffffffc530)
    at ../../third_party/WebKit/Source/WebCore/bindings/v8/ScriptProfiler.cpp:154
#13 0x000000000081d695 in WebCore::InspectorProfilerAgent::takeHeapSnapshot (this=0x7fffee601c30)
    at ../../third_party/WebKit/Source/WebCore/inspector/InspectorProfilerAgent.cpp:415
#14 0x0000000001368fc5 in WebCore::InspectorBackendDispatcherImpl::Profiler_takeHeapSnapshot (this=0x7fffeb770a90, callId=32)
    at gen/webcore/InspectorBackendDispatcher.cpp:4259
#15 0x000000000136af16 in WebCore::InspectorBackendDispatcherImpl::dispatch (this=0x7fffeb770a90, message=...)
    at gen/webcore/InspectorBackendDispatcher.cpp:4692
#16 0x00000000007bc438 in WebCore::InspectorController::dispatchMessageFromFrontend (this=0x7fffec15b3f0, message=...)
    at ../../third_party/WebKit/Source/WebCore/inspector/InspectorController.cpp:327
#17 0x0000000000560f18 in WebKit::WebDevToolsAgentImpl::dispatchOnInspectorBackend (this=0x7fffeb788910, message=...)
    at ../../third_party/WebKit/Source/WebKit/chromium/src/WebDevToolsAgentImpl.cpp:379
#18 0x00000000004320cf in DRTDevToolsAgent::call (this=0x7fffec13fe10, args=...)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/DRTDevToolsAgent.cpp:87
#19 0x0000000000432667 in DRTDevToolsAgent::AsyncCallTask::runIfValid (this=0x7fffe919efc0)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/DRTDevToolsAgent.h:83
#20 0x0000000000432a5a in MethodTask<DRTDevToolsAgent>::run (this=0x7fffe919efc0)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/Task.h:79
#21 0x00000000004658ab in invokeTask (context=0x7fffe919efc0) at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/Task.cpp:65
#22 0x00000000005f08f0 in base::internal::RunnableAdapter<void (*)(void*)>::Run (this=0x7fffffffca30, a1=@0x7fffe919ef78)
    at ../../base/bind_internal.h:169
#23 0x00000000005f0685 in base::internal::InvokeHelper<false, void, base::internal::RunnableAdapter<void (*)(void*)>, void (void* const&)>::MakeItSo(base::internal::RunnableAdapter<void (*)(void*)>, void* const&) (runnable=..., a1=@0x7fffe919ef78) at ../../base/bind_internal.h:868
#24 0x00000000005f0064 in base::internal::Invoker<1, base::internal::BindState<base::internal::RunnableAdapter<void (*)(void*)>, void (void*), void (void*)>, void (void*)>::Run(base::internal::BindStateBase*) (base=0x7fffe919ef60) at ../../base/bind_internal.h:1170
#25 0x00000000005ef4fd in base::Callback<void ()>::Run() const (this=0x7fffffffcd58) at ../../base/callback.h:272
#26 0x0000000001f75a24 in MessageLoop::RunTask (this=0x7fffee57ce00, pending_task=...) at ../../base/message_loop.cc:457
#27 0x0000000001f75b3b in MessageLoop::DeferOrRunPendingTask (this=0x7fffee57ce00, pending_task=...) at ../../base/message_loop.cc:469
#28 0x0000000001f7632f in MessageLoop::DoWork (this=0x7fffee57ce00) at ../../base/message_loop.cc:646
#29 0x0000000001fad738 in base::MessagePumpGlib::RunWithDispatcher (this=0x7fffee57bf50, delegate=0x7fffee57ce00, dispatcher=0x0)
    at ../../base/message_pump_glib.cc:210
#30 0x0000000001fadb18 in base::MessagePumpGlib::Run (this=0x7fffee57bf50, delegate=0x7fffee57ce00) at ../../base/message_pump_glib.cc:298
#31 0x0000000001f756eb in MessageLoop::RunInternal (this=0x7fffee57ce00) at ../../base/message_loop.cc:416
#32 0x0000000001f7559e in MessageLoop::RunHandler (this=0x7fffee57ce00) at ../../base/message_loop.cc:389
#33 0x0000000001f74ed3 in MessageLoop::Run (this=0x7fffee57ce00) at ../../base/message_loop.cc:299
#34 0x00000000013cbedb in webkit_support::RunMessageLoop () at ../../webkit/support/webkit_support.cc:448
#35 0x000000000047177a in TestShell::waitTestFinished (this=0x7fffffffde00)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/TestShellLinux.cpp:75
#36 0x0000000000469fe9 in TestShell::runFileTest (this=0x7fffffffde00, params=...)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/TestShell.cpp:267
#37 0x0000000000433910 in runTest (shell=..., params=..., testName=
    "/sources/chrome-git-new/src/third_party/WebKit/LayoutTests/inspector/profiler/heap-snapshot-inspect-dom-wrapper.html", testShellMode=false)
    at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/DumpRenderTree.cpp:127
#38 0x0000000000434518 in main (argc=2, argv=0x7fffffffe2c8) at ../../third_party/WebKit/Tools/DumpRenderTree/chromium/DumpRenderTree.cpp:280
(gdb) f 2
#2  0x0000000001771723 in V8_Fatal (file=0x3fa2e08 "../../v8/src/profile-generator.cc", line=2089, format=0x3fa2220 "CHECK(%s) failed")
    at ../../v8/src/checks.cc:58
58	  i::OS::Abort();
(gdb) l

[Yury Semikhatsky]

The test is now skipped on debug builds: http://trac.webkit.org/changeset/112885

[Brian Burg]

Closing as invalid, as this bug pertains to the old inspector UI and/or its tests.
Please file a new bug (https://www.webkit.org/new-inspector-bug) if the bug/feature/issue is still relevant to WebKit trunk.