Bug 157781 – ARMV7K: Crash at JavaScriptCore: WTF::ScopedLambdaFunctor<bool

• Status: RESOLVED
• Resolution: FIXED
• Component: Web Template Framework

[Michael Saboff]

An internal scripting tool, scripter, when compiled for ARMv7K crashes in locking code.

Crash trace:

scripter crash
JavaScriptCore:  WTF::ScopedLambdaFunctor<bool
Thread 6 Crashed:
0   JavaScriptCore                0x1e33590a WTF::ScopedLambdaFunctor<bool (), bool WTF::ConditionBase::waitUntil<std::__1::unique_lock<WTF::Lock> >(std::__1::unique_lock<WTF::Lock>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1ll, 1000000000ll> > >)::'lambda'()>::implFunction(void*) + 8 (atomic:842)
1   JavaScriptCore                0x1e3721bc WTF::ParkingLot::parkConditionallyImpl(void const*, WTF::ScopedLambda<bool ()> const&, WTF::ScopedLambda<void ()> const&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1ll, 1000000000ll> > >) + 1532 (ScopedLambda.h:56)
2   JavaScriptCore                0x1e335898 bool WTF::ConditionBase::waitUntil<std::__1::unique_lock<WTF::Lock> >(std::__1::unique_lock<WTF::Lock>&, std::__1::chrono::time_point<std::__1::chrono::steady_clock, std::__1::chrono::duration<long long, std::__1::ratio<1ll, 1000000000ll> > >) + 142 (ParkingLot.h:62)
3   JavaScriptCore                0x1e073d54 JSC::SlotVisitor::drainFromShared(JSC::SlotVisitor::SharedDrainMode) + 276 (Condition.h:113)
4   JavaScriptCore                0x1e176582 WTF::SharedTaskFunctor<void (), JSC::Heap::markRoots(double, void*, void*, int (&) [48])::$_0>::run() + 238 (Heap.cpp:584)
5   JavaScriptCore                0x1e371022 WTF::ParallelHelperClient::runTask(WTF::RefPtr<WTF::SharedTask<void ()> >) + 32 (ParallelHelperPool.cpp:111)
6   JavaScriptCore                0x1e3717d4 WTF::ParallelHelperPool::helperThreadBody() + 226 (ParallelHelperPool.cpp:198)
7   JavaScriptCore                0x1e06c7e0 WTF::threadEntryPoint(void*) + 138 (functional:1817)
8   JavaScriptCore                0x1e06c748 WTF::wtfThreadEntryPoint(void*) + 12 (ThreadingPthreads.cpp:164)
9   libsystem_pthread.dylib       0x1a8878a0 _pthread_body + 222 (pthread.c:695)
10  libsystem_pthread.dylib       0x1a8877c2 _pthread_start + 232 (pthread.c:738)
11  libsystem_pthread.dylib       0x1a885538 thread_start

Since this only happens on this one platform, there is suspicion that this is a clang bug.

[Michael Saboff]

<rdar://problem/26076062>

[Michael Saboff]

Created attachment 279086 [details]
Patch

[WebKit Commit Bot]

Comment on attachment 279086 [details]
Patch

Rejecting attachment 279086 [details] from commit-queue.

Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.webkit.org', '--bot-id=webkit-cq-02', 'validate-changelog', '--check-oops', '--non-interactive', 279086, '--port=mac']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit

ChangeLog entry in Source/WTF/ChangeLog contains OOPS!.

Full output: http://webkit-queues.webkit.org/results/1334344

[Michael Saboff]

Committed r200993: <http://trac.webkit.org/changeset/200993>