New issue
Advanced search Search tips

Issue 594503 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Mac
Pri: 3
Type: Bug



Sign in to add a comment

v8::internal::Deoptimizer::GetOutputInfo: infrequent but consistent crash reports

Project Member Reported by jkummerow@chromium.org, Mar 14 2016

Issue description

We're still seeing a slow but steady trickle of v8::internal::Deoptimizer::GetOutputInfo crash reports on several operating systems (at least Win and Mac; numbers on Linux and Android may be too low to show up).

In some reports, the magic signature is "v8::internal::Isolate::PrintStack", but Deoptimizer::GetOutputInfo is three frames further down on the stack, so the root problem is presumably the same.

There's a good chance that at least some of these crashes are due to random corruption; however the number of reports is high enough that I'm willing to assume that there's also a real bug at play here.

We don't have a repro; if anyone happens to find one please share it.

This issue has low priority due to the small number of reports. Just filing this as a tracking bug.
 
Project Member

Comment 1 by sheriffbot@chromium.org, Mar 15 2016

Labels: M-51 M-50 Fracas
Users experienced this crash on the following builds:

Win Canary 51.0.2679.0 - 1 reports, 1 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Dev 50.0.2661.18 - 1 reports, 1 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 2 by sheriffbot@chromium.org, Mar 17 2016

Labels: OS-Linux
Users experienced this crash on the following builds:

Win Dev 51.0.2679.0 - 41 reports, 40 clients (signature v8::internal::StackFrame::ComputeType)
Win Dev 51.0.2679.0 - 215 reports, 168 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Dev 51.0.2679.0 - 8 reports, 7 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Dev 51.0.2679.0 - 2 reports, 2 clients (signature v8::internal::StackFrame::ComputeType)
Linux Dev 51.0.2679.0 - 4 reports, 4 clients (signature v8::internal::StackFrame::ComputeType)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Labels: -M-50
Link to Builds on which this crash is seen:

https://crash.corp.google.com/browse?q=product.name%3D%27Chrome%27%20AND%20custom_data.ChromeCrashProto.ptype%3D%27renderer%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27v8%3A%3Ainternal%3A%3ADeoptimizer%3A%3AGetOutputInfo%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D#-samplereports:5,productversion:1000


51.0.2679.0	0.56%	229 [One of the Top crashes # 26 in the latest Dev Build]
49.0.2623.87	0.02%	10	

Removing the M50 label as not many instances more than 2 instances are shown in the latest builds 50.0.2661.37 [1], 50.0.2661.26 [2] & 50.0.2661.18	[1]		
Project Member

Comment 4 by sheriffbot@chromium.org, Mar 20 2016

Labels: OS-Android
Users experienced this crash on the following builds:

Win Dev 51.0.2679.0 - 83 reports, 81 clients (signature v8::internal::StackFrame::ComputeType)
Win Dev 51.0.2679.0 - 551 reports, 351 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Dev 51.0.2679.0 - 4 reports, 4 clients (signature v8::internal::StackFrame::ComputeType)
Mac Dev 51.0.2679.0 - 17 reports, 13 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Linux Dev 51.0.2679.0 - 4 reports, 4 clients (signature v8::internal::StackFrame::ComputeType)
Android Dev 51.0.2681.4 - 2 reports, 2 clients (signature v8::internal::StackFrame::ComputeType)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Cc: adamk@chromium.org
Labels: Stability-Crash
Components: Blink>JavaScript
Labels: -Pri-3 ReleaseBlock-Beta Pri-0
Owner: jkummerow@chromium.org
Status: Assigned (was: Available)
This is one of the top crashes in latest canary - 51.0.2696.0 - 428 reports, 300+ clients.

Assigning to v8 team for updates.

Dev channel is scheduled for tomorrow, please have a fix before 8.00 pm PST build cut.
Labels: Stability-Sheriff-Desktop
Owner: ishell@chromium.org
Given that these crashes started with 51.0.2695.1, my suspicion is they are also related to TCO, adding ishell.
Cc: ishell@chromium.org
Labels: -ReleaseBlock-Beta -Pri-0 Pri-3
Owner: jkummerow@chromium.org
The TCO was enabled in 51.0.2695.0 and indeed caused a lot of crashes. It is controlled by a Finch flag and it is already disabled. See issue 537444 for details about TCO-related crashes.

Lowering priority to previous level.
(Chromium stability sheriff here.)

What is the experiment ID?

Looking at crash counts, I don't see this on canary after 51.0.2680.0 or 51.0.2681.0.

Dev looks good: Windows Dev 51.0.2679.0 has a bunch of this signature (1017 crashes) but none since then. Current dev is 51.0.2700.0 which has ~100K other crashes right now, no occurrences of this.
The ID is V8_ES2015_TailCalls. It is disabled since April 4th.
Labels: -Stability-Sheriff-Desktop
Thanks!
Project Member

Comment 15 by sheriffbot@chromium.org, Apr 18 2016

Labels: M-52
Users experienced this crash on the following builds:

Win Canary 52.0.2711.0 -  0.49 CPM, 2 reports, 2 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Just got one on my MacBook: crash/2075d4d200000000

I have experimental javascript features AND the interpreter switched on. 
It could be TCO.
100% of reports from 2717 (both for "StackFrame::ComputeType" and for "Deoptimizer::GetOutputInfo") have the "V8_ES2015_TailCalls: Control" experiment.
Which means that TCO experiment is off. But if someone has enabled experimental JavaScript the TCO will be on regardless of the experiment state.
Project Member

Comment 20 by sheriffbot@chromium.org, May 23 2016

Labels: M-53
Users experienced this crash on the following builds:

Mac Canary 53.0.2746.0 -  0.67 CPM, 1 reports, 1 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 21 by sheriffbot@chromium.org, Jun 1 2016

Labels: -M-51 -M-52 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 22 by sheriffbot@chromium.org, Jun 2 2016

Labels: FoundIn-53
Users experienced this crash on the following builds:

Mac Canary 53.0.2754.0 -  0.16 CPM, 1 reports, 1 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 23 by sheriffbot@chromium.org, Jun 8 2016

Labels: FoundIn-M-53
Users experienced this crash on the following builds:

Win Canary 53.0.2762.0 -  0.44 CPM, 2 reports, 2 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 24 by sheriffbot@chromium.org, Jun 15 2016

Labels: FoundIn-M-52
Users experienced this crash on the following builds:

Win Dev 53.0.2763.0 -  0.17 CPM, 102 reports, 102 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Dev 53.0.2763.0 -  0.22 CPM, 2 reports, 2 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Canary 53.0.2767.0 -  0.47 CPM, 1 reports, 1 clients (signature v8::internal::StackFrame::ComputeType)
Linux Beta 52.0.2743.33 -  0.12 CPM, 1 reports, 1 clients (signature v8::internal::StackFrame::ComputeType)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Labels: -Pri-3 ReleaseBlock-Dev Pri-1
Could someone please look into this? We are seeing a spike of these crashes on latest canary#53.0.2784.1.

53.0.2784.2	0.06%	4
=============================	
53.0.2784.1	1.28%	80
=============================	
53.0.2784.0	0.43%	27	
53.0.2783.4	0.06%	4	
53.0.2783.2	0.21%	13	
53.0.2782.1	0.02%	1	
53.0.2782.0	0.18%	11	
53.0.2781.2	0.05%	3	
53.0.2781.0	0.03%	2	
53.0.2780.2	0.02%	1	
53.0.2780.0	0.14%	9	
53.0.2779.0	0.06%	4	
53.0.2778.2	0.06%	4	
53.0.2778.0	0.10%	6	
53.0.2777.0	0.11%	7	
53.0.2774.3	2.61%	163	
53.0.2774.1	0.02%	1	
53.0.2773.0	0.06%	4	
53.0.2772.0	0.06%	4	
53.0.2771.0	0.10%	6	
53.0.2770.0	0.06%	4	
53.0.2769.2	0.03%	2	
53.0.2768.1	0.02%	1	
53.0.2768.0	0.32%	20	
53.0.2767.5	0.51%	32	
53.0.2767.4	1.50%	94	
53.0.2767.0	0.06%	4	
53.0.2766.0	0.18%	11	
53.0.2765.0	0.06%	4	
53.0.2764.0	0.05%	3	
53.0.2763.1	0.03%	2	
53.0.2763.0	1.68%	105	
53.0.2762.0	0.14%	9	
53.0.2756.0	0.06%	4	
53.0.2754.1	0.02%	1	
53.0.2754.0	0.02%	1	
53.0.2748.0	0.02%	1	
53.0.2746.1	0.02%	1	
52.0.2743.41	0.02%	1	
52.0.2743.24	0.02%	1	
52.0.2743.10	0.02%	1	
52.0.2740.1	0.02%	1	
52.0.2740.0	0.02%	1	
52.0.2739.2	0.02%	1	
52.0.2739.0	0.11%	7	
52.0.2738.0	0.03%	2	
52.0.2737.0	0.03%	2	
52.0.2735.0	0.05%	3	
52.0.2734.0	0.03%	2	
52.0.2729.4	0.03%	2	
52.0.2729.3	0.06%	4	
52.0.2729.0	0.06%	4	
52.0.2725.0	0.03%	2	
52.0.2724.0	0.05%	3	
52.0.2723.3	0.02%	1	
52.0.2719.0	0.02%	1	
52.0.2718.0	0.03%	2	
52.0.2717.4	0.42%	26	
52.0.2717.0	1.41%	88	
52.0.2716.0	7.28%	455	
52.0.2715.0	0.02%	1	
52.0.2710.0	0.02%	1	
52.0.2709.0	0.03%	2	
51.0.2704.106	0.10%	6	
51.0.2704.103	1.79%	112	
51.0.2704.84	1.50%	94	
51.0.2704.79	0.30%	19	
51.0.2704.63	0.26%	16	
51.0.2704.47	0.03%	2	
51.0.2704.36	0.02%	1	
51.0.2704.29	0.02%	1	
51.0.2704.19	0.03%	2	
51.0.2704.4	0.03%	2	
51.0.2703.0	0.02%	1	
51.0.2695.1	0.02%	1	
51.0.2681.0	0.11%	7	
51.0.2680.1	0.05%	3	
51.0.2680.0	0.29%	18	
51.0.2679.4	0.05%	3	
51.0.2679.0	16.89%	1055	
51.0.2678.0	0.08%	5	
51.0.2677.0	0.22%	14	
51.0.2676.0	0.45%	28	
51.0.2675.0	0.21%	13	
51.0.2674.1	0.05%	3	
51.0.2674.0	0.14%	9	
51.0.2673.1	0.02%	1	
51.0.2673.0	0.26%	16	
51.0.2672.1	0.03%	2	
51.0.2672.0	0.21%	13	
51.0.2671.0	0.03%	2	
51.0.2669.1	0.02%	1	
51.0.2669.0	0.02%	1	
51.0.2665.0	0.16%	10	
51.0.2664.1	0.03%	2	
51.0.2664.0	0.02%	1	
51.0.2663.0	0.02%	1	
51.0.2662.0	0.02%	1	
50.0.2661.102	2.18%	136	
50.0.2661.94	1.17%	73	
50.0.2661.87	0.11%	7	
50.0.2661.75	0.03%	2	
50.0.2661.66	0.03%	2	
50.0.2661.57	0.03%	2	
50.0.2661.49	0.03%	2	
50.0.2661.37	0.05%	3	
50.0.2661.26	0.03%	2	
50.0.2661.18	0.02%	1	
50.0.2661.12	0.24%	15	
50.0.2661.11	0.06%	4	
50.0.2657.3	0.13%	8	
50.0.2657.0	0.06%	4	
50.0.2656.0	0.02%	1	
50.0.2652.2	0.02%	1	
50.0.2652.0	0.03%	2	
49.0.2623.112	2.29%	143	
49.0.2623.110	1.46%	91	
49.0.2623.87	2.13%	133	
49.0.2623.75	0.08%	5	
49.0.2623.64	0.02%	1	
48.0.2564.116	36.72%	2294	
48.0.2564.109	2.11%	132	
48.0.2564.103	0.10%	6	
48.0.2564.97	0.18%	11	
48.0.2564.82	0.08%	5	
48.0.2564.48	0.02%	1	
48.0.2564.22	0.02%	1	
47.0.2526.111	0.26%	16	
47.0.2526.106	0.18%	11	
47.0.2526.80	0.30%	19	
47.0.2526.73	0.13%	8	
47.0.2516.0	0.02%	1	
46.0.2490.86	0.30%	19	
46.0.2490.80	0.13%	8	
46.0.2490.71	0.08%	5	
46.0.2490.4	0.02%	1	
46.0.2471.2	0.02%	1	
46.0.2462.0	0.03%	2	
45.0.2454.101	0.18%	11	
45.0.2454.99	0.02%	1	
45.0.2454.93	0.06%	4	
45.0.2454.85	0.08%	5	
45.0.2453.0	0.02%	1	
45.0.2443.0	0.16%	10	
44.0.2403.155	0.02%	1	
44.0.2403.107	0.02%	1	
44.0.2403.89	0.03%	2	
44.0.2403.30	0.02%	1	
44.0.2393.0	0.03%	2	
43.0.2357.132	0.02%	1	
42.0.2311.135	0.03%	2	
42.0.2311.90	0.03%	2	
41.0.2272.118	0.02%	1	
41.0.2272.101	0.03%	2	
41.0.2272.89	0.03%	2	
41.0.2272.87	0.03%	2	
41.0.2272.76	0.02%	1	
41.0.2272.16	0.02%	1	
41.0.2272.12	0.02%	1	
40.0.2214.115	0.13%	8	
40.0.2214.111	0.06%	4	
40.0.2214.94	0.05%	3	
40.0.2214.93	0.10%	6	
40.0.2214.91	0.10%	6	
40.0.2214.45	0.02%	1	
40.0.2209.0	0.02%	1	
40.0.2188.2	0.02%	1	
39.0.2171.99	0.06%	4	
39.0.2171.95	0.24%	15	
39.0.2171.71	0.08%	5	
38.0.2125.122	0.05%	3	
38.0.2125.111	0.37%	23	
38.0.2125.104	0.14%	9	
38.0.2125.101	0.02%	1	
37.0.2062.124	0.14%	9	
37.0.2062.120	0.10%	6	
37.0.2062.103	0.05%	3	
37.0.2062.102	0.03%	2	
37.0.2062.94	0.03%	2	
36.0.1985.143	0.16%	10	
36.0.1985.125	0.05%	3	
35.0.1916.153	0.08%	5	
35.0.1916.114	0.40%	25	
34.0.1847.137	0.03%	2	
34.0.1847.131	0.16%	10	
34.0.1847.116	0.06%	4	
33.0.1750.154	0.18%	11	
33.0.1750.149	0.02%	1	
33.0.1750.146	0.06%	4	
33.0.1750.117	0.03%	2	
32.0.1700.107	0.18%	11	
32.0.1700.102	0.14%	9	
32.0.1700.76	0.10%	6	
31.0.1650.63	0.51%	32	
31.0.1650.59	0.34%	21	
30.0.1599.101	0.03%	2	
30.0.1599.69	0.02%	1	
30.0.1573.2	0.14%	9	
29.0.1547.76	0.02%	1	
29.0.1547.62	0.03%	2	
26.0.1410.5	0.02%	1	

Thank you!

Comment 26 by adamk@chromium.org, Jun 30 2016

I suspect the spike is related to another GC bug, issue 624790.
Labels: -Pri-1 -ReleaseBlock-Dev Pri-3
The spike has subsided.
Project Member

Comment 28 by sheriffbot@chromium.org, Jul 5 2016

Labels: FoundIn-M-54
Users experienced this crash on the following builds:

Win Dev 53.0.2783.2 -  0.24 CPM, 81 reports, 81 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Canary 54.0.2787.0 -  0.47 CPM, 3 reports, 3 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 29 by sheriffbot@chromium.org, Jul 15 2016

Labels: -M-53 MovedFrom-53
This issue has been moved once and is lower than Pri-1. Removing the milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 30 by sheriffbot@chromium.org, Sep 8 2016

Labels: FoundIn-M-55
Users experienced this crash on the following builds:

Win Beta 53.0.2785.89 -  2.50 CPM, 2534 reports, 2502 clients (signature v8::internal::Deoptimizer::GetOutputInfo)
Mac Canary 55.0.2853.0 -  1.13 CPM, 2 reports, 2 clients (signature v8::internal::StackFrame::ComputeType)
Mac Beta 53.0.2785.89 -  0.34 CPM, 19 reports, 19 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Issue 652888 has been merged into this issue.
We noted that the google sheet does not crash when using mac chrome browser 52.x, however all versions of 53.x do in fact crash. 
Thanks for your response.   Noted that by going back to an older version of
Mac browser 52.x (from August) we do not experience the crash.  However,
all available versions of 53.x are crashing.
Project Member

Comment 34 by sheriffbot@chromium.org, Oct 9 2016

Labels: FoundIn-M-56
Users experienced this crash on the following builds:

Win Dev 55.0.2882.4 -  1.20 CPM, 238 reports, 221 clients (signature v8::internal::StackFrame::ComputeType)
Mac Canary 56.0.2885.0 -  1.36 CPM, 1 reports, 1 clients (signature v8::internal::StackFrame::ComputeType)
Mac Beta 54.0.2840.50 -  0.19 CPM, 4 reports, 4 clients (signature v8::internal::Deoptimizer::GetOutputInfo)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Just to update the latest behavior, Still crashes observed on latest stable, beta and dev channels. Below information provides the comparison between previous and latest channels including total number of instances.
 
--------------------------------------------------+      
 Latest Channel    |    Previous Channel          |
--------------------------------------------------+
54.0.2840.87	116|	54.0.2840.71	2102	  |--> Stable
55.0.2883.35	6  | 	55.0.2883.28	2	  |--> Beta
56.0.2906.0	0  |	56.0.2902.0	1	  |--> Dev
--------------------------------------------------+
	
Link to the list of the builds getting crash:
---------------------------------------------
https://crash.corp.google.com/browse?q=product.name%3D%27Chrome%27%20AND%20custom_data.ChromeCrashProto.ptype%3D%27renderer%27%20AND%20custom_data.ChromeCrashProto.magic_signature_1.name%3D%27v8%3A%3Ainternal%3A%3ADeoptimizer%3A%3AGetOutputInfo%27&ignore_case=false&enable_rewrite=true&omit_field_name=&omit_field_value=&omit_field_opt=%3D#-samplereports:5,productversion:1000
Project Member

Comment 36 by sheriffbot@chromium.org, Feb 1 2017

Labels: FoundIn-M-58
Users experienced this crash on the following builds:

Win Canary 58.0.2998.0 -  0.16 CPM, 3 reports, 3 clients (signature v8::internal::Isolate::PrintStack)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 37 by sheriffbot@chromium.org, Mar 15 2017

Labels: FoundIn-M-59
Users experienced this crash on the following builds:

Win Canary 59.0.3041.0 -  0.13 CPM, 4 reports, 4 clients (signature v8::internal::Isolate::PrintStack)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas
Project Member

Comment 38 by sheriffbot@chromium.org, Apr 16 2017

Labels: FoundIn-M-60
Users experienced this crash on the following builds:

Win Canary 60.0.3072.0 -  0.55 CPM, 12 reports, 12 clients (signature v8::internal::Isolate::PrintStack)

If this update was incorrect, please add "Fracas-Wrong" label to prevent future updates.

- Go/Fracas

Comment 39 by siggi@chromium.org, May 16 2017

This just happened to me on my Z840 dev box. go/crash/63538c1aa8000000.

Sign in to add a comment