[Webkit-unassigned] [Bug 90957] [Qt] There are parallel GC related crashes regularly

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=90957





--- Comment #20 from Zoltan Herczeg <zherczeg at webkit.org>  2012-07-25 04:32:19 PST ---
Filip, you might figure out something from this:

This is the backtrace where the sleep(1) waits:

#0  JSC::MarkStackArray::expand (this=0x4b89a0)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:136
#1  0x00007ffff72a213c in JSC::MarkStackArray::append (this=0x4b89a0, ptr=<value optimized out>,
    bytes=<value optimized out>, values=0x7fff8f7bd068, length=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.h:401
#2  JSC::MarkStack::internalAppend (this=0x4b89a0, ptr=<value optimized out>, bytes=<value optimized out>,
    values=0x7fff8f7bd068, length=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/runtime/Structure.h:540
#3  JSC::MarkStack::internalAppend (this=0x4b89a0, ptr=<value optimized out>, bytes=<value optimized out>,
    values=0x7fff8f7bd068, length=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.h:467
#4  JSC::MarkStack::append (this=0x4b89a0, ptr=<value optimized out>, bytes=<value optimized out>,
    values=0x7fff8f7bd068, length=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.h:437
#5  JSC::SlotVisitor::copyAndAppend (this=0x4b89a0, ptr=<value optimized out>, bytes=<value optimized out>,
    values=0x7fff8f7bd068, length=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:653
#6  0x00007ffff74653ee in JSC::JSArray::visitChildren (cell=0x7fff9f70c480, visitor=...)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/runtime/JSArray.cpp:1382
#7  0x00007ffff72a12f8 in visitChildren (this=0x4b89a0)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:378
#8  JSC::SlotVisitor::drain (this=0x4b89a0)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:421
#9  0x00007ffff72a15f4 in JSC::SlotVisitor::drainFromShared (this=0x4b89a0,
    sharedDrainMode=JSC::SlotVisitor::SlaveDrain)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:514
#10 0x00007ffff72a257b in JSC::MarkStackThreadSharedData::markingThreadMain (this=<value optimized out>,
    slotVisitor=0x4b89a0) at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:261
#11 0x00007ffff7531415 in wtfThreadEntryPoint (param=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/WTF/wtf/ThreadingPthreads.cpp:162

During the 1 second sleep, this function owerwrites the previous chain:

#0  JSC::MarkStackArray::donateSomeCellsTo (this=0x4b0130, other=...)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:194
#1  0x00007ffff72a119b in JSC::SlotVisitor::donateKnownParallel (this=0x4b0130)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:406
#2  0x00007ffff72a12c6 in JSC::SlotVisitor::drain (this=0x4b0130)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:422
#3  0x00007ffff72a15f4 in JSC::SlotVisitor::drainFromShared (this=0x4b0130,
    sharedDrainMode=JSC::SlotVisitor::SlaveDrain)
    at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:514
#4  0x00007ffff72a257b in JSC::MarkStackThreadSharedData::markingThreadMain (this=<value optimized out>,
    slotVisitor=0x4b0130) at /home/hzoli/WebKit-git/WebKit-git/Source/JavaScriptCore/heap/MarkStack.cpp:261
#5  0x00007ffff7531415 in wtfThreadEntryPoint (param=<value optimized out>)
    at /home/hzoli/WebKit-git/WebKit-git/Source/WTF/wtf/ThreadingPthreads.cpp:162

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.