Bug 140520 - [Win] Crash in 'inspector-protocol/debugger/setBreakpoint-dfg.html'
Summary: [Win] Crash in 'inspector-protocol/debugger/setBreakpoint-dfg.html'
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: JavaScriptCore (show other bugs)
Version: 528+ (Nightly build)
Hardware: PC All
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2015-01-15 15:46 PST by Brent Fulgham
Modified: 2015-02-05 10:22 PST (History)
4 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Brent Fulgham 2015-01-15 15:46:47 PST
The layout test 'inspector-protocol/debugger/setBreakpoint-dfg.html' is crashing on Windows.

Apparently the value we are working with is not (as expected) a JSScope

The crash trace is:

>	WTF.dll!WTFCrashWithSecurityImplication() Line 335	C++
 	JavaScriptCore.dll!JSC::jsCast<JSC::JSScope *>(JSC::JSValue from) Line 249	C++
 	JavaScriptCore.dll!JSC::Register::scope() Line 239	C++
 	JavaScriptCore.dll!JSC::ExecState::scope(int scopeRegisterOffset) Line 50	C++
 	JavaScriptCore.dll!JSC::DebuggerCallFrame::scope() Line 149	C++
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::exceptionOrCaughtValue(JSC::ExecState * state) Line 342	C++
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchDidPause(Inspector::ScriptDebugListener * listener) Line 140	C++
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(const WTF::HashSet<Inspector::ScriptDebugListener *,WTF::PtrHash<Inspector::ScriptDebugListener *>,WTF::HashTraits<Inspector::ScriptDebugListener *> > & listeners, void (Inspector::ScriptDebugListener *) * callback) Line 281	C++
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::dispatchFunctionToListeners(void (Inspector::ScriptDebugListener *) * callback) Line 274	C++
 	JavaScriptCore.dll!Inspector::ScriptDebugServer::handlePause(JSC::JSGlobalObject * vmEntryGlobalObject, JSC::Debugger::ReasonForPause __formal) Line 315	C++
 	JavaScriptCore.dll!JSC::Debugger::pauseIfNeeded(JSC::ExecState * callFrame) Line 679	C++
 	JavaScriptCore.dll!JSC::Debugger::updateCallFrameAndPauseIfNeeded(JSC::ExecState * callFrame) Line 635	C++
 	JavaScriptCore.dll!JSC::Debugger::atStatement(JSC::ExecState * callFrame) Line 715	C++
 	JavaScriptCore.dll!JSC::Interpreter::debug(JSC::ExecState * callFrame, JSC::DebugHookID debugHookID) Line 1228	C++
 	JavaScriptCore.dll!operationDebug(JSC::ExecState * exec, int debugHookID) Line 1005	C++
 	[External Code]	
 	[Frames below may be incorrect and/or missing]	
 	JavaScriptCore.dll!llint_entry() Line 7211	Unknown
 	JavaScriptCore.dll!vmEntryToJavaScript() Line 109	Unknown
 	JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77	C++
 	JavaScriptCore.dll!JSC::Interpreter::execute(JSC::EvalExecutable * eval, JSC::ExecState * callFrame, JSC::JSValue thisValue, JSC::JSScope * scope) Line 1201	C++
 	JavaScriptCore.dll!JSC::globalFuncEval(JSC::ExecState * exec) Line 527	C++
 	[External Code]	
 	JavaScriptCore.dll!llint_entry() Line 7178	Unknown
 	JavaScriptCore.dll!llint_entry() Line 7178	Unknown
 	JavaScriptCore.dll!llint_entry() Line 7178	Unknown
 	JavaScriptCore.dll!vmEntryToJavaScript() Line 109	Unknown
 	JavaScriptCore.dll!JSC::JITCode::execute(JSC::VM * vm, JSC::ProtoCallFrame * protoCallFrame) Line 77	C++
 	JavaScriptCore.dll!JSC::Interpreter::executeCall(JSC::ExecState * callFrame, JSC::JSObject * function, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 978	C++
 	JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args) Line 39	C++
 	JavaScriptCore.dll!JSC::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 44	C++
 	WebKit.dll!WebCore::JSMainThreadExecState::call(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 56	C++
 	WebKit.dll!WebCore::functionCallHandlerFromAnyThread(JSC::ExecState * exec, JSC::JSValue functionObject, JSC::CallType callType, const JSC::CallData & callData, JSC::JSValue thisValue, const JSC::ArgList & args, JSC::JSValue * exception) Line 52	C++
 	JavaScriptCore.dll!Deprecated::ScriptFunctionCall::call(bool & hadException) Line 138	C++
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::callFunctionWithEvalEnabled(Deprecated::ScriptFunctionCall & function, bool & hadException) Line 89	C++
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::makeCall(Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::InspectorValue> * result) Line 108	C++
 	JavaScriptCore.dll!Inspector::InjectedScriptBase::makeEvalCall(WTF::String & errorString, Deprecated::ScriptFunctionCall & function, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * objectResult, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 121	C++
 	JavaScriptCore.dll!Inspector::InjectedScript::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String & objectGroup, bool includeCommandLineAPI, bool returnByValue, bool generatePreview, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> * result, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 70	C++
 	JavaScriptCore.dll!Inspector::InspectorRuntimeAgent::evaluate(WTF::String & errorString, const WTF::String & expression, const WTF::String * objectGroup, const bool * includeCommandLineAPI, const bool * doNotPauseOnExceptionsAndMuteConsole, const int * executionContextId, const bool * returnByValue, const bool * generatePreview, WTF::RefPtr<Inspector::Protocol::Runtime::RemoteObject> & result, Inspector::Protocol::OptOutput<bool> * wasThrown) Line 132	C++
 	JavaScriptCore.dll!Inspector::InspectorRuntimeBackendDispatcher::evaluate(long callId, const Inspector::InspectorObject & message) Line 4274	C++
 	JavaScriptCore.dll!Inspector::InspectorRuntimeBackendDispatcher::dispatch(long callId, const WTF::String & method, WTF::Ref<Inspector::InspectorObject> && message) Line 4200	C++
 	JavaScriptCore.dll!Inspector::InspectorBackendDispatcher::dispatch(const WTF::String & message) Line 131	C++
 	WebKit.dll!WebCore::InspectorController::dispatchMessageFromFrontend(const WTF::String & message) Line 363	C++
 	WebKit.dll!WebCore::InspectorBackendDispatchTask::timerFired() Line 99	C++
 	[External Code]	
 	WebKit.dll!WebCore::Timer::fired() Line 133	C++
 	WebKit.dll!WebCore::ThreadTimers::sharedTimerFiredInternal() Line 135	C++
 	WebKit.dll!WebCore::ThreadTimers::sharedTimerFired() Line 108	C++
 	WebKit.dll!WebCore::TimerWindowWndProc(HWND__ * hWnd, unsigned int message, unsigned int wParam, long lParam) Line 93	C++
 	[External Code]	
 	DumpRenderTree.dll!runTest(const std::basic_string<char,std::char_traits<char>,std::allocator<char> > & inputLine) Line 1132	C++
 	DumpRenderTree.dll!main(int argc, const char * * argv) Line 1476	C++
 	DumpRenderTree.dll!dllLauncherEntryPoint(int argc, const char * * argv) Line 1506	C++
 	DumpRenderTree.exe!main(int argc, const char * * argv) Line 239	C++
 	[External Code]
Comment 1 Radar WebKit Bug Importer 2015-02-05 10:22:28 PST
<rdar://problem/19731661>