New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.
Starred by 18 users
Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Jan 2010
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug
M-5

Restricted
  • Only users with EditIssue permission may comment.



Sign in to add a comment
REGRESSION: sad tab on http://www.hadess.net (and others, include google maps)
Project Member Reported by evan@chromium.org, Jan 15 2010 Back to list
Page seems to render, then crash.

Regression range:
http://build.chromium.org/buildbot/perf/dashboard/ui/changelog.html?
url=/trunk/src&range=36263:36342

The backtrace makes no sense -- all the addresses are in the stack, not in 
the code.  This makes me suspect the v8 roll ager did.

Linux 64.
 
Comment 1 by evan@chromium.org, Jan 15 2010
Program received signal SIGSEGV, Segmentation fault.
0x00007fffc003b684 in ?? ()
(gdb) bt
#0  0x00007fffc003b684 in ?? ()
#1  0x00007fffe00bd751 in ?? ()
#2  0x00007fffe00bd751 in ?? ()
#3  0x00007fffe00bd819 in ?? ()
#4  0x00007fffe926c1f9 in ?? ()
#5  0x00007fffe00bd7e1 in ?? ()
#6  0x00007fffe00bd6f9 in ?? ()
#7  0x00007fffe00bd651 in ?? ()
#8  0x00007fffe00bd689 in ?? ()
#9  0x00007fffffffbd08 in ?? ()
#10 0x00007fffc00e6271 in ?? ()
#11 0x00007fffe92c8f69 in ?? ()
#12 0x00007fffe00bd651 in ?? ()
#13 0x00007fffe910d541 in ?? ()
#14 0x00007fffe00af701 in ?? ()
#15 0x00007fffffffbd40 in ?? ()
#16 0x00007fffc002c4d9 in ?? ()
#17 0x00007fffe92c8f69 in ?? ()
#18 0x00007fffe910d541 in ?? ()
#19 0x00007fffe926c151 in ?? ()
#20 0x00007fffe910d509 in ?? ()
#21 0x00007fffe92e6701 in ?? ()
#22 0x00007fffffffbd78 in ?? ()
#23 0x00007fffc00130d8 in ?? ()
#24 0x00007fffe92c8f69 in ?? ()
#25 0x00007fffe910d509 in ?? ()
#26 0x00007fffc0013041 in ?? ()
#27 0x0000000500000000 in ?? ()
#28 0x0000000000000000 in ?? ()


pmap output near those addresses:

00007ffff7ff8000     16K rw---    [ anon ]
00007ffff7ffc000      4K r-x--    [ anon ]
00007ffff7ffd000      4K r----  /lib/ld-2.10.1.so
00007ffff7ffe000      4K rw---  /lib/ld-2.10.1.so
00007ffffffe2000    116K rw---    [ stack ]
ffffffffff600000      4K r-x--    [ anon ]

Comment 2 by evan@chromium.org, Jan 15 2010
Oh, and the other addresses (7fffc 7fffe)

00007fffc0000000   1000K rwx--    [ anon ]
00007fffc00fa000 523288K -----    [ anon ]
00007fffe0000000   1024K rw---    [ anon ]
00007fffe0100000  15360K -----    [ anon ]
00007fffe1000000   1024K rw---    [ anon ]
00007fffe1100000  48128K -----    [ anon ]
00007fffe4000000    420K rw---    [ anon ]
00007fffe4069000  65116K -----    [ anon ]

Comment 3 by evan@chromium.org, Jan 17 2010
Labels: ReleaseBlock-Dev Mstone-5
It seems that we have more of these websites that suddenly are no longer working : 
e.g. http://www.nvidia.com/object/unix.html,  www.farmville.com, Also searching on 
maps.google.com delivers the sad smiley
Comment 5 by evan@chromium.org, Jan 18 2010
Summary: REGRESSION: sad tab on http://www.hadess.net (and others, include google maps) (was: NULL)
Comment 6 by acoil...@gmail.com, Jan 18 2010
Don't know if it's the good place, but same for me, including many other sites:
iGoogle, http://dev.chromium.org/ (what a shame...), http://www.simplicime.com/,
http://www.vodkaster.com/, http://www.jiwa.fr/, http://www.canonrumors.com/,
http://www.dpreview.com/, ......

Starting with a fresh user account does not change anything. 

Tested on Archlinux 64 and Chromium 4.0.302.0 (36495)
Comment 7 by ager@chromium.org, Jan 19 2010
Bill or Lasse, could one of you guys have a look at this one?
Comment 8 by acoil...@gmail.com, Jan 19 2010
One more information, there is no problem with my Ubuntu 32bits install with chromium 
4.0.302.0 (36505) (from ppa, not the official repo). I would be more incline to 
suspect the 64 vs 32 version rather than official repo/ubuntu build, because someone 
on Arch recompiled completely chromium and still got the problem. 

http://aur.archlinux.org/packages.php?ID=31368 for the topic on chromium install on 
Archlinux.
Comment 9 by whesse@chromium.org, Jan 19 2010
Status: Assigned
Problem has been reproduced, and tracked down.  Some new remembered-set code in V8
did not mark the rax register as used, and overwrote a pointer.  Will be fixed
immediately.
Problem has been reproduced, and tracked down.  Some new remembered-set code in V8
did not mark the rax register as used, and overwrote a pointer.  Will be fixed
immediately.
 Issue 32493  has been merged into this issue.
 Issue 32562  has been merged into this issue.
Comment 13 by Deleted ...@, Jan 20 2010
By immediately, do you mean like government immediately (which could be any time from 
now until the end of the year); or, do you mean immediately! Because I am using 64-bit 
LinuxMint 7 (which is the same as Jaunty Ubuntu 64-bit), and I am still not able to go 
to blogger.com at this point! I have no intention of reinstalling Linux just to get to 
use Chromium!

So if you fixed it... You failed! Cause it's still not working right!
heya,

I'm getting the same issue, and it is somewhat frustarting. I would offer to help
with reporting, but it seems they've already managed to reproduce it and track it.

However, teddyhcraig, give them a chance =). You can use anothe browser in the
meantime, that's what I'm doing.

And I suspect that they'll mark this issue as Fixed when it's...well...fixed? Lol.

Victor
The following revision refers to this bug:
    http://src.chromium.org/viewvc/chrome?view=rev&revision=36625 

------------------------------------------------------------------------
r36625 | sgjesse@google.com | 2010-01-20 01:02:12 -0800 (Wed, 20 Jan 2010) | 5 lines
Changed paths:
   M http://src.chromium.org/viewvc/chrome/trunk/src/DEPS?r1=36625&r2=36624

Update V8 to version 2.0.6.1

BUG= 32436 
TEST=none
Review URL: http://codereview.chromium.org/555001
------------------------------------------------------------------------

Status: Fixed
Fixed by updating V8 to version 2.0.6.1.

Fix in r36625.
 Issue 32706  has been merged into this issue.
Comment 18 by acoil...@gmail.com, Jan 20 2010
Fixed on build 36643. Thanks a lot for the quick fix.
 Issue 32816  has been merged into this issue.
Project Member Comment 20 by bugdroid1@chromium.org, Oct 12 2012
Labels: Restrict-AddIssueComment-Commit
This issue has been closed for some time. No one will pay attention to new comments.
If you are seeing this bug or have new data, please click New Issue to start a new bug.
Project Member Comment 21 by bugdroid1@chromium.org, Mar 10 2013
Labels: -Mstone-5 M-5
Project Member Comment 22 by bugdroid1@chromium.org, Mar 11 2013
Labels: -Area-Undefined
Project Member Comment 23 by bugdroid1@chromium.org, Mar 13 2013
Labels: -Restrict-AddIssueComment-Commit Restrict-AddIssueComment-EditIssue
Sign in to add a comment