Bug 47800 – ASSERT loading wikipedia page with interpreter

• Status: RESOLVED
• Resolution: INVALID
• Component: JavaScriptCore

[Xan Lopez]

r69941, JIT is disabled.

ASSERTION FAILED: low
(../../JavaScriptCore/bytecode/CodeBlock.cpp:1643 int JSC::CodeBlock::expressionRangeForBytecodeOffset(JSC::CallFrame*, unsigned int, int&, int&, int&))

Program received signal SIGSEGV, Segmentation fault.
0x019b8670 in JSC::CodeBlock::expressionRangeForBytecodeOffset (this=0x9fe6bf8, callFrame=0xb62005f0, bytecodeOffset=9, divot=@0xbfffbc2c, 
    startOffset=@0xbfffbc34, endOffset=@0xbfffbc30) at ../../JavaScriptCore/bytecode/CodeBlock.cpp:1643
1643	    ASSERT(low);
(gdb) bt
#0  0x019b8670 in JSC::CodeBlock::expressionRangeForBytecodeOffset (this=0x9fe6bf8, callFrame=0xb62005f0, bytecodeOffset=9, divot=@0xbfffbc2c, 
    startOffset=@0xbfffbc34, endOffset=@0xbfffbc30) at ../../JavaScriptCore/bytecode/CodeBlock.cpp:1643
#1  0x01a68b77 in JSC::createNotAnObjectError (exec=0xb62005f0, error=0xb5eae100, bytecodeOffset=9, codeBlock=0x9fe6bf8)
    at ../../JavaScriptCore/runtime/ExceptionHelpers.cpp:184
#2  0x019f8e36 in JSC::Interpreter::throwException (this=0x8a0e540, callFrame=@0xbfffd2f0, exceptionValue=..., bytecodeOffset=9, explicitThrow=false)
    at ../../JavaScriptCore/interpreter/Interpreter.cpp:615
#3  0x01a0adf4 in JSC::Interpreter::privateExecute (this=0x8a0e540, flag=JSC::Interpreter::Normal, registerFile=0x8a0e54c, callFrame=0xb62005f0, 
    exception=0x8a0d9dc) at ../../JavaScriptCore/interpreter/Interpreter.cpp:4765
#4  0x019f9ca5 in JSC::Interpreter::executeCall (this=0x8a0e540, callFrame=0x9cbb944, function=0xb5eb18c0, callType=JSC::CallTypeJS, callData=..., 
    thisValue=..., args=..., exception=0x8a0d9dc) at ../../JavaScriptCore/interpreter/Interpreter.cpp:828
#5  0x01a57013 in JSC::call (exec=0x9cbb944, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...)
    at ../../JavaScriptCore/runtime/CallData.cpp:38
#6  0x00d238e6 in WebCore::JSMainThreadExecState::call (exec=0x9cbb944, functionObject=..., callType=JSC::CallTypeJS, callData=..., thisValue=..., args=...)
    at ../../WebCore/bindings/js/JSMainThreadExecState.h:48
#7  0x00d5e468 in WebCore::JSEventListener::handleEvent (this=0x9d738c0, scriptExecutionContext=0x9ce02e8, event=0xa049c48)
    at ../../WebCore/bindings/js/JSEventListener.cpp:124
#8  0x00f14ec0 in WebCore::EventTarget::fireEventListeners (this=0x9ce02b0, event=0xa049c48, d=0x9d73930, entry=...)
    at ../../WebCore/dom/EventTarget.cpp:335
#9  0x00f14d71 in WebCore::EventTarget::fireEventListeners (this=0x9ce02b0, event=0xa049c48) at ../../WebCore/dom/EventTarget.cpp:304
#10 0x00f2834b in WebCore::Node::handleLocalEvents (this=0x9ce02b0, event=0xa049c48) at ../../WebCore/dom/Node.cpp:2525
#11 0x00f28b06 in WebCore::Node::dispatchGenericEvent (this=0x9ce02b0, prpEvent=...) at ../../WebCore/dom/Node.cpp:2643
#12 0x00f28705 in WebCore::Node::dispatchEvent (this=0x9ce02b0, prpEvent=...) at ../../WebCore/dom/Node.cpp:2588
#13 0x00ed9885 in WebCore::Document::finishedParsing (this=0x9ce02b0) at ../../WebCore/dom/Document.cpp:4134
#14 0x010a28dd in WebCore::HTMLTreeBuilder::finished (this=0x9ce6618) at ../../WebCore/html/parser/HTMLTreeBuilder.cpp:2766
#15 0x0107ead2 in WebCore::HTMLDocumentParser::end (this=0x9ce5590) at ../../WebCore/html/parser/HTMLDocumentParser.cpp:323
#16 0x0107ebd9 in WebCore::HTMLDocumentParser::attemptToRunDeferredScriptsAndEnd (this=0x9ce5590) at ../../WebCore/html/parser/HTMLDocumentParser.cpp:332
#17 0x0107e0bf in WebCore::HTMLDocumentParser::prepareToStopParsing (this=0x9ce5590) at ../../WebCore/html/parser/HTMLDocumentParser.cpp:150
#18 0x0107ec79 in WebCore::HTMLDocumentParser::endIfDelayed (this=0x9ce5590) at ../../WebCore/html/parser/HTMLDocumentParser.cpp:357
#19 0x0107ee81 in WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution (this=0x9ce5590) at ../../WebCore/html/parser/HTMLDocumentParser.cpp:416
#20 0x0107f155 in WebCore::HTMLDocumentParser::notifyFinished (this=0x9ce5590, cachedResource=0xa038680)
    at ../../WebCore/html/parser/HTMLDocumentParser.cpp:460
#21 0x0116ec23 in WebCore::CachedScript::checkNotify (this=0xa038680) at ../../WebCore/loader/CachedScript.cpp:100
#22 0x0116ebb7 in WebCore::CachedScript::data (this=0xa038680, data=..., allDataReceived=true) at ../../WebCore/loader/CachedScript.cpp:90
#23 0x011b39bd in WebCore::Loader::Host::didFinishLoading (this=0x9f85850, loader=0x9c950d0) at ../../WebCore/loader/loader.cpp:421
#24 0x011c9e3d in WebCore::SubresourceLoader::didFinishLoading (this=0x9c950d0, finishTime=0) at ../../WebCore/loader/SubresourceLoader.cpp:181
#25 0x011c6e37 in WebCore::ResourceLoader::didFinishLoading (this=0x9c950d0, finishTime=0) at ../../WebCore/loader/ResourceLoader.cpp:421
#26 0x015e8240 in WebCore::closeCallback (source=0x8f80ee8, res=0x8eb4870) at ../../WebCore/platform/network/soup/ResourceHandleSoup.cpp:770
#27 0x0410f46e in async_ready_close_callback_wrapper (source_object=0x8f80ee8, res=0x8eb4870, user_data=0x0) at ginputstream.c:484
#28 0x04123158 in g_simple_async_result_complete (simple=0x8eb4870) at gsimpleasyncresult.c:692
#29 0x04123194 in complete_in_idle_cb (data=0x8eb4870) at gsimpleasyncresult.c:702
#30 0x0425e0a1 in g_idle_dispatch (source=0x9ceb5f8, callback=0x4123160 <complete_in_idle_cb>, user_data=0x8eb4870) at gmain.c:4254
---Type <return> to continue, or q <return> to quit---
#31 0x0425a5f2 in g_main_dispatch (context=0x813aef8) at gmain.c:2149
#32 0x0425b8e6 in g_main_context_dispatch (context=0x813aef8) at gmain.c:2702
#33 0x0425bd3b in g_main_context_iterate (context=0x813aef8, block=1, dispatch=1, self=0x8112f18) at gmain.c:2780
#34 0x0425c4a4 in g_main_loop_run (loop=0x816ab18) at gmain.c:2988
#35 0x03dc0c33 in gtk_main () at gtkmain.c:1321
#36 0x0806d561 in main (argc=1, argv=0xbfffed64) at ../../src/ephy-main.c:741
(gdb)

[Gavin Barraclough]

This code no longer exists in ToT.