New issue
Advanced search Search tips

Issue 625517 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Jul 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

[couldn't find pc offset for node=519][method: style] in jquery?

Project Member Reported by ukai@chromium.org, Jul 4 2016

Issue description

Version: 54.0.2788.0 (Developer Build) (64-bit) with dcheck_always_on=1
OS: Linux

What steps will reproduce the problem?
(1) visit https://www.scratchjr.org/
(2)
(3)

What is the expected output?

What do you see instead?
[couldn't find pc offset for node=519]
[method: style]
[source:
function style(a,b,c,d){if(a&&3!==a.nodeType&&8!==a.nodeType&&a.style){var e,f,g,h=n.camelCase(b),i=a.style;if(b=n.cssProps[h]||(n.cssProps[h]=Vb(i,h)),g=n.cssHooks[b]||n.cssHooks[h],void 0===c)return g&&"get"in g&&void 0!==(e=g.get(a,!1,d))?e:i[b];if(f=typeof c,"string"===f&&(e=Rb.exec(c))&&(c=(e[1]+1)*e[2]+parseFloat(n.css(a,b)),f="number"),null!=c&&c===c&&("number"!==f||n.cssNumber[h]||(c+="px"),l.clearCloneStyle||""!==c||0!==b.indexOf("background")||(i[b]="inherit"),!(g&&"set"in g&&void 0===(c=g.set(a,c,d)))))try{i[b]="",i[b]=c}catch(j){}}}
]
Stacktrace (fefefefe-fefefeff) 0x2507e96d59c9 0x16662be44fb1:
==== JS stack trace =========================================

    2: arguments adaptor frame: 3->4
Security context: 0x103ff2a8e371 <String[25]: https://www.scratchjr.org>
    3: /* anonymous */ [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897c91](this=0xd58cb3344e1 <JS Global Object>#0#,a=0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>#1#,b=0x16662be2fd39 <String[7]: opacity>,c=0)
    4: access [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897746](this=0x1b7fcc75a341 <JS Function n (SharedFunctionInfo 0x16662be383d9)>#2#,a=0x1b7fcc7cf001 <JS Object>#3#,b=0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#,c=0x16662be2fd39 <String[7]: opacity>,d=0,e=0x26fab4904439 <true>,f=0x26fab4904399 <undefined>,g=0x26fab4904439 <true>)
    5: /* anonymous */ [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897481](this=0xd58cb3344e1 <JS Global Object>#0#,a=0x1b7fcc7cf001 <JS Object>#3#,b=0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#,c=0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#,d=0x26fab4904399 <undefined>,e=0x26fab4904439 <true>,f=0x26fab4904399 <undefined>,g=0x26fab4904399 <undefined>)
    6: arguments adaptor frame: 5->7
    7: css [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3896e17](this=0x1b7fcc7cf001 <JS Object>#3#,a=0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#,b=0x26fab4904399 <undefined>)
    8: arguments adaptor frame: 1->2
    9: z [https://www.scratchjr.org/src/responsiveslides.min.js:3] [pc=0x594c3a14509](this=0xd58cb3344e1 <JS Global Object>#0#,b=0)
   10: /* anonymous */ [https://www.scratchjr.org/src/responsiveslides.min.js:~6] [pc=0x594c3a249e9](this=0xd58cb3344e1 <JS Global Object>#0#)


==== Details ================================================

[2]: arguments adaptor frame: 3->4 {
  // actual arguments
  [00] : 0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>#1#
  [01] : 0x16662be2fd39 <String[7]: opacity>
  [02] : 0
}

[3]: /* anonymous */ [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897c91](this=0xd58cb3344e1 <JS Global Object>#0#,a=0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>#1#,b=0x16662be2fd39 <String[7]: opacity>,c=0) {
  // stack-allocated locals
  var d = 0x26fab4904399 <undefined>
  var e = 0x26fab4904399 <undefined>
  var f = 0x29225edd1099 <an Object with map 0x1913cf70a921>#6#
  var g = 0
  // expression stack (top to bottom)
  [08] : 0
  [07] : 0x16662be2fd39 <String[7]: opacity>
  [06] : 0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>#1#
  [05] : 0x1b7fcc75a341 <JS Function n (SharedFunctionInfo 0x16662be383d9)>#2#
  [04] : 0x1b7fcc76aaf1 <JS Function style (SharedFunctionInfo 0x16662be44fb1)>#
7#
--------- s o u r c e   c o d e ---------
function (a,b,c){var d,e,f={},g=0;if(n.isArray(b)){for(d=Jb(a),e=b.length;e>g;g++)f[b[g]]=n.css(a,b[g],!1,d);return f}return void 0!==c?n.style(a,b,c):n.css(a,b)\x0a}
-----------------------------------------
}

[4]: access [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897746](this=0x1b7fcc75a341 <JS Function n (SharedFunctionInfo 0x16662be383d9)>#2#,a=0x1b7fcc7cf001 <JS Object>#3#,b=0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#,c=0x16662be2fd39 <String[7]: opacity>,d=0,e=0x26fab4904439 <true>,f=0x26fab4904399 <undefined>,g=0x26fab4904439 <true>) {
  // stack-allocated locals
  var h = 2
  var i = 5
  // heap-allocated locals
  var j = 0x26fab4904279 <false>
  // expression stack (top to bottom)
  [06] : 0
  [05] : 0x16662be2fd39 <String[7]: opacity>
  [04] : 0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>#1#
  [03] : 0xd58cb3344e1 <JS Global Object>#0#
  [02] : 0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#
--------- s o u r c e   c o d e ---------
function (a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)n.access(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;i>h;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return...

-----------------------------------------
}

[5]: /* anonymous */ [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3897481](this=0xd58cb3344e1 <JS Global Object>#0#,a=0x1b7fcc7cf001 <JS Object>#3#,b=0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#,c=0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#,d=0x26fab4904399 <undefined>,e=0x26fab4904439 <true>,f=0x26fab4904399 <undefined>,g=0x26fab4904399 <undefined>) {
  // stack-allocated locals
  var h = 0x16662be2fd39 <String[7]: opacity>
  var i = 5
  // heap-allocated locals
  var j = 0x26fab4904279 <false>
  // expression stack (top to bottom)
  [15] : 0x26fab4904439 <true>
  [14] : 0x26fab4904399 <undefined>
  [13] : 0x26fab4904439 <true>
  [12] : 0
  [11] : 0x16662be2fd39 <String[7]: opacity>
  [10] : 0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#
  [09] : 0x1b7fcc7cf001 <JS Object>#3#
  [08] : 0x1b7fcc75a341 <JS Function n (SharedFunctionInfo 0x16662be383d9)>#2#
  [07] : 0x16662be863d9 <JS Function n.access (SharedFunctionInfo 0x16662be412d9)>#8#
  [06] : 2
  [05] : 4
  [04] : 0x1b7fcc7d5c69 <FixedArray[4]>#9#
  [03] : 0x1913cf779791 <Map(FAST_HOLEY_ELEMENTS)>#10#
  [02] : 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
--------- s o u r c e   c o d e ---------
function (a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)n.access(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;i>h;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return...

-----------------------------------------
}
[6]: arguments adaptor frame: 5->7 {
  // actual arguments
  [00] : 0x1b7fcc7cf001 <JS Object>#3#
  [01] : 0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#
  [02] : 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
  [03] : 0x26fab4904399 <undefined>
  [04] : 0x26fab4904279 <false>
}

[7]: css [https://www.scratchjr.org/src/jquery-1.11.0.min.js:3] [pc=0x594c3896e17](this=0x1b7fcc7cf001 <JS Object>#3#,a=0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#,b=0x26fab4904399 <undefined>) {
  // stack-allocated locals
  var arguments = 0x29225edd04e9 <an Arguments with map 0x1913cf70e861>#11#
  // heap-allocated locals
  var b = 0x26fab4904399 <undefined>
  var a = 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
  // expression stack (top to bottom)
  [07] : 0x26fab4904279 <false>
  [06] : 0x26fab4904399 <undefined>
  [05] : 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
  [04] : 0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>#4#
  [03] : 0x1b7fcc7cf001 <JS Object>#3#
  [02] : 0xd58cb3344e1 <JS Global Object>#0#
  [01] : 0x16662be863d9 <JS Function n.access (SharedFunctionInfo 0x16662be412d9)>#8#
--------- s o u r c e   c o d e ---------
function css(a,b){return W(this,function(a,b,c){var d,e,f={},g=0;if(n.isArray(b)){for(d=Jb(a),e=b.length;e>g;g++)f[b[g]]=n.css(a,b[g],!1,d);return f}return void 0!==c?n.style(a,b,c):n.css(a,b)\x0a},a,b,arguments.length>1)}
-----------------------------------------
}

[8]: arguments adaptor frame: 1->2 {
  // actual arguments
  [00] : 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
}

[9]: z [https://www.scratchjr.org/src/responsiveslides.min.js:3] [pc=0x594c3a14509](this=0xd58cb3344e1 <JS Global Object>#0#,b=0) {
  // heap-allocated locals
  var b = 0
  // expression stack (top to bottom)
  [02] : 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>#5#
  [01] : 0x1b7fcc7cf001 <JS Object>#3#
  [00] : 0x1b7fcc76a8f9 <JS Function css (SharedFunctionInfo 0x16662be454f1)>#12
#
--------- s o u r c e   c o d e ---------
function z(b){a.before(b);F?(e.removeClass(j).css(y).eq(b).addClass(j).css(x),\x0an=b,setTimeout(function(){a.after(b)},h)):e.stop().fadeOut(h,function(){c(this).removeClass(j).css(y).css("opacity",1)}).eq(b).fadeIn(h,function(){c(this).addClass(j).css(x);a.after(b);n=b})}
-----------------------------------------
}
[10]: /* anonymous */ [https://www.scratchjr.org/src/responsiveslides.min.js:~6] [pc=0x594c3a249e9](this=0xd58cb3344e1 <JS Global Object>#0#) {
// optimized frame
--------- s o u r c e   c o d e ---------
function (){e.stop(!0,!0);var b=n+1<C?n+1:0;(a.pager||a.manualControls)&&r(b);z(b)}
-----------------------------------------
}
==== Key         ============================================

 #0# 0xd58cb3344e1: 0xd58cb3344e1 <JS Global Object>
 #1# 0x1b7fcc748751: 0x1b7fcc748751 <an HTMLLIElement with map 0x1913cf77d8e1>jQuery1110027324395299900295: 3
   txattr_detected: 0x26fab4904439 <true>
 #2# 0x1b7fcc75a341: 0x1b7fcc75a341 <JS Function n (SharedFunctionInfo 0x16662be383d9)>
 #3# 0x1b7fcc7cf001: 0x1b7fcc7cf001 <JS Object>
            length: 5
        prevObject: 0x1b7fcc7cef11 <JS Object>#13#
           context: 0x1b7fcc748611 <an HTMLUListElement with map 0x1913cf77d889>#14#
 #4# 0x29225edd0551: 0x29225edd0551 <JS Function (SharedFunctionInfo 0x2d9f3ec14601)>
 #5# 0x1b7fcc7cf0f1: 0x1b7fcc7cf0f1 <an Object with map 0x1913cf779791>
             float: 0x103ff2a99e99 <String[4]: none>
          position: 0x16662be30661 <String[8]: absolute>
           opacity: 0
            zIndex: 1
 #6# 0x29225edd1099: 0x29225edd1099 <an Object with map 0x1913cf70a921>
 #7# 0x1b7fcc76aaf1: 0x1b7fcc76aaf1 <JS Function style (SharedFunctionInfo 0x16662be44fb1)>
 #8# 0x16662be863d9: 0x16662be863d9 <JS Function n.access (SharedFunctionInfo 0x16662be412d9)>
 #9# 0x1b7fcc7d5c69: 0x1b7fcc7d5c69 <FixedArray[4]>
                 0: 0x16662be30aa9 <String[5]: float>
                 1: 0x26fab49052f9 <String[8]: position>
                 2: 0x16662be2fd39 <String[7]: opacity>
                 3: 0x16662be30a69 <String[6]: zIndex>
 #10# 0x1913cf779791: 0x1913cf779791 <Map(FAST_HOLEY_ELEMENTS)>
 #11# 0x29225edd04e9: 0x29225edd04e9 <an Arguments with map 0x1913cf70e861>
            length: 1
            callee: 0x1b7fcc76a8f9 <JS Function css (SharedFunctionInfo 0x16662be454f1)>#12#
 #12# 0x1b7fcc76a8f9: 0x1b7fcc76a8f9 <JS Function css (SharedFunctionInfo 0x16662be454f1)>
 #13# 0x1b7fcc7cef11: 0x1b7fcc7cef11 <JS Object>
           context: 0x1b7fcc748611 <an HTMLUListElement with map 0x1913cf77d889>
#14#
            length: 1
 #14# 0x1b7fcc748611: 0x1b7fcc748611 <an HTMLUListElement with map 0x1913cf77d889>
   txattr_detected: 0x26fab4904439 <true>
=====================


Received signal 4 ILL_ILLOPN 7ffff3fc63bf
Received signal 11 <unknown> 000000000000




Please use labels and text to provide additional information.

 
Components: -Infra>Client>V8 Blink>JavaScript
Owner: jochen@chromium.org
Status: Assigned (was: Untriaged)
Seems like these are tests with DCHECK on?

Comment 3 by jochen@chromium.org, Jul 13 2016

Components: -Blink>JavaScript Blink>JavaScript>Compiler
Owner: jarin@chromium.org
that's the deoptimizer complaining about stuff

Comment 4 by jarin@chromium.org, Jul 13 2016

It does not reproduce for me. Could you give more details about the repro; especially, how exactly you built chrome?

Comment 5 by jarin@chromium.org, Jul 13 2016

Actually, I now managed to repro with 54.0.2788.0. However, it does not repro on tip of tree; moreover, 54.0.2788.0 crashes immediately in debug mode. Does it repro for you in a later version? (I cannot repro on tip of tree.)

Comment 6 by ukai@chromium.org, Jul 14 2016

doesn't reproduce it on Chromium 54.0.2796.0 (Developer Build) with dcheck_always_on=1

Comment 7 by jarin@chromium.org, Jul 26 2016

Status: Fixed (was: Assigned)

Sign in to add a comment