[Webkit-unassigned] [Bug 73886] REGRESSION(r101863-r102042): Assertion hit: m_verifier.isSafeToUse() in RefCountedBase::ref in FunctionCodeBlock

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=73886





--- Comment #4 from Ryosuke Niwa <rniwa at webkit.org>  2011-12-05 19:50:22 PST ---
Some stack traces. FYI, it's super easy to reproduce if you go to facebook and spend even like 1-2 minutes click on different places.

Safari: SafeBrowsingManager:
#0    0x1000c940a in WTF::RefCountedBase::ref at RefCounted.h:53
#1    0x1000dd65c in JSC::FunctionCodeBlock::FunctionCodeBlock at CodeBlock.h:1361
#2    0x1000d5a67 in JSC::FunctionExecutable::produceCodeBlockFor at Executable.cpp:475
#3    0x1000d6aea in JSC::FunctionExecutable::compileForCallInternal at Executable.cpp:516
#4    0x1000d6ffd in JSC::FunctionExecutable::compileOptimizedForCall at Executable.cpp:447
#5    0x1000780b3 in JSC::FunctionExecutable::compileOptimizedFor at Executable.h:573
#6    0x1000657cc in JSC::FunctionCodeBlock::compileOptimized at CodeBlock.cpp:2146
#7    0x10011e8b8 in cti_optimize_from_ret at JITStubs.cpp:2059
#8    0x100117386 in ctiOpThrowNotCaught at Instruction.h:81
#9    0x1000f41a0 in JSC::JITCode::execute at JITCode.h:115
#10    0x1000ea0ca in JSC::Interpreter::executeCall at Interpreter.cpp:1075
#11    0x100062787 in JSC::call at CallData.cpp:39
#12    0x10016238e in JSObjectCallAsFunction at JSObjectRef.cpp:443

JavaScriptCore::Marking
#0    0x7fff88483a6a in __semwait_signal
#1    0x7fff88487881 in _pthread_cond_wait
#2    0x100234f4d in WTF::ThreadCondition::wait at ThreadingPthreads.cpp:372
#3    0x100268245 in JSC::SlotVisitor::drainFromShared at MarkStack.cpp:423
#4    0x1002686cc in JSC::MarkStackThreadSharedData::markingThreadMain at MarkStack.cpp:224
#5    0x100268711 in JSC::MarkStackThreadSharedData::markingThreadStartFunc at MarkStack.cpp:229
#6    0x100234dc2 in WTF::threadEntryPoint at Threading.cpp:67
#7    0x7fff88481fd6 in _pthread_start
#8    0x7fff88481e89 in thread_start

JavaScriptCore::Marking
#0    0x7fff88483a6a in __semwait_signal
#1    0x7fff88487881 in _pthread_cond_wait
#2    0x100234f4d in WTF::ThreadCondition::wait at ThreadingPthreads.cpp:372
#3    0x100268245 in JSC::SlotVisitor::drainFromShared at MarkStack.cpp:423
#4    0x1002686cc in JSC::MarkStackThreadSharedData::markingThreadMain at MarkStack.cpp:224
#5    0x100268711 in JSC::MarkStackThreadSharedData::markingThreadStartFunc at MarkStack.cpp:229
#6    0x100234dc2 in WTF::threadEntryPoint at Threading.cpp:67
#7    0x7fff88481fd6 in _pthread_start
#8    0x7fff88481e89 in thread_start

JavaScriptCore::Marking
#0    0x7fff88483a6a in __semwait_signal
#1    0x7fff88487881 in _pthread_cond_wait
#2    0x100234f4d in WTF::ThreadCondition::wait at ThreadingPthreads.cpp:372
#3    0x100268245 in JSC::SlotVisitor::drainFromShared at MarkStack.cpp:423
#4    0x1002686cc in JSC::MarkStackThreadSharedData::markingThreadMain at MarkStack.cpp:224
#5    0x100268711 in JSC::MarkStackThreadSharedData::markingThreadStartFunc at MarkStack.cpp:229
#6    0x100234dc2 in WTF::threadEntryPoint at Threading.cpp:67
#7    0x7fff88481fd6 in _pthread_start
#8    0x7fff88481e89 in thread_start

JavaScriptCore::BlockFree
#0    0x7fff88483a6a in __semwait_signal
#1    0x7fff88487881 in _pthread_cond_wait
#2    0x100235047 in WTF::ThreadCondition::timedWait at ThreadingPthreads.cpp:393
#3    0x10026f0a3 in JSC::Heap::waitForRelativeTimeWhileHoldingLock at Heap.cpp:391
#4    0x10026f0d9 in JSC::Heap::waitForRelativeTime at Heap.cpp:401
#5    0x10026f106 in JSC::Heap::blockFreeingThreadMain at Heap.cpp:415
#6    0x10026f239 in JSC::Heap::blockFreeingThreadStartFunc at Heap.cpp:406
#7    0x100234dc2 in WTF::threadEntryPoint at Threading.cpp:67
#8    0x7fff88481fd6 in _pthread_start
#9    0x7fff88481e89 in thread_start

Safari: SnapshotStore
#0    0x7fff88483a6a in __semwait_signal
#1    0x7fff88487881 in _pthread_cond_wait
#2    0x100234f4d in WTF::ThreadCondition::wait at ThreadingPthreads.cpp:372
#3    0x100234fde in WTF::ThreadCondition::timedWait at ThreadingPthreads.cpp:382
#4    0x7fff8729b949 in Safari::MessageQueue<WTF::RefPtr<Safari::SnapshotStore::DiskAccessMessage> >::waitForMessageFilteredWithTimeout<bool ()(WTF::RefPtr<Safari::SnapshotStore::DiskAccessMessage>&)>
#5    0x7fff87299d49 in Safari::SnapshotStore::diskAccessThreadBody
#6    0x7fff8729a503 in Safari::SnapshotStore::diskAccessThreadCallback
#7    0x100234dc2 in WTF::threadEntryPoint at Threading.cpp:67
#8    0x7fff88481fd6 in _pthread_start
#9    0x7fff88481e89 in thread_start

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.