New issue
Advanced search Search tips

Issue 638069 link

Starred by 2 users
Status: Fixed
Owner:
yukishiino@chromium.org
Closed: Oct 2016
Cc:
yukishiino@chromium.org
jochen@chromium.org
haraken@chromium.org
verwa...@chromium.org
lfg@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 1
Type: Bug

Blocking:
issue 596622



Sign in to add a comment

WebGL conformance test failures with FATAL:v8initializer.cpp(346): Check failed: totalSize >= 0 (-8 vs. 0)

Project Member Reported by kbr@chromium.org, Aug 16 2016 
Per https://bugs.chromium.org/p/chromium/issues/detail?id=596622#c122 , have seen a couple of flaky WebGL conformance test failures caused by the above assertion failure.

Examples:

https://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_rel_ng/builds/273099
https://build.chromium.org/p/tryserver.chromium.win/builders/win_chromium_rel_ng/builds/272607

May be able to find more in this list:
https://chromium-try-flakes.appspot.com/all_flake_occurrences?key=ahVzfmNocm9taXVtLXRyeS1mbGFrZXNyLwsSBUZsYWtlIiR3ZWJnbF9jb25mb3JtYW5jZV90ZXN0cyAod2l0aCBwYXRjaCkM

Stack trace:
WebglConformance_deqp_data_gles2_shaders_keywords (gpu_tests.webgl_conformance_integration_test.WebGLConformanceIntegrationTest) ... [1700:2384:0812/155527:FATAL:v8initializer.cpp(346)] Check failed: totalSize >= 0 (-8 vs. 0)
Backtrace:
	base::debug::StackTrace::StackTrace [0x623C7287+23]
	logging::LogMessage::~LogMessage [0x62372461+49]
	blink::V8IdleTaskRunner::PostIdleTask [0x62CF0B8A+229]
	WTF::ArrayBufferContents::DataHolder::~DataHolder [0x63D23261+44]
	WTF::RefCounted<WTF::ArrayBuffer>::deref [0x62C7C509+25]
	WTF::RefCounted<blink::DrawingBuffer>::deref [0x6343CF74+34]
	blink::FinalizerTraitImpl<blink::XPathNSResolver,1>::finalize [0x62D0D726+25]
	blink::HeapObjectHeader::finalize [0x622C922C+46]
	blink::NormalPage::sweep [0x622CAB88+234]
	blink::BaseArena::sweepUnsweptPage [0x622CAC21+42]
	blink::ThreadState::performIdleLazySweep [0x622CF772+397]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::ThreadState::*)(double),WTF::UnretainedWrapper<blink::ThreadState,1> >,void __cdecl(double)>::Run [0x622CDD5D+26]
	WTF::Function<void __cdecl(double),1>::operator() [0x62BB7F76+103]
	blink::WebScheduler::postNonNestableIdleTask [0x62BB8054+102]
	blink::scheduler::WebSchedulerImpl::runIdleTask [0x62BD101F+42]
	base::internal::FunctorTraits<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),void>::Invoke<std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::Idle [0x62BD0E9B+27]
	base::internal::Invoker<base::internal::BindState<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),base::internal::PassedWrapper<std::unique_ptr<blink::WebThread::IdleTask,std::d [0x62BD0EC1+33]
	base::internal::Invoker<base::internal::BindState<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),base::internal::PassedWrapper<std::unique_ptr<blink::WebThread::IdleTask,std::d [0x62BD0FF0+25]
	blink::scheduler::SingleThreadIdleTaskRunner::RunTask [0x62C365EE+185]
	base::internal::FunctorTraits<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*)(base::Callback<void __cdecl(base::TimeTicks),1>),void>::Invoke<base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner> const &,base::Callback<void __cdecl( [0x62C361BF+34]
	base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*const &)(base::Callback<void __cdecl(base::TimeTicks),1>),base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner> const &,base::Callback<voi [0x62C361E4+34]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*)(base::Callback<void __cdecl(base::TimeTicks),1>),base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner>,base::Callback<void __cdecl(ba [0x62C36530+23]
	base::debug::TaskAnnotator::RunTask [0x623CB910+256]
	blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue [0x62C35329+562]
	blink::scheduler::TaskQueueManager::DoWork [0x62C34A70+452]
	base::internal::FunctorTraits<void (__thiscall content::WebFileWriterBase::*)(__int64,bool),void>::Invoke<base::WeakPtr<content::WebFileWriterImpl> const &,__int64,bool> [0x62B92F05+31]
	base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall content::WebFileWriterBase::*const &)(__int64,bool),base::WeakPtr<content::WebFileWriterImpl> const &,__int64,bool> [0x62C3402C+34]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::TaskQueueManager::*)(base::TimeTicks,bool),base::WeakPtr<blink::scheduler::TaskQueueManager>,base::TimeTicks,bool>,void __cdecl(void)>::RunImpl<void (__thiscall blink::sc [0x62C34048+23]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::TaskQueueManager::*)(base::TimeTicks,bool),base::WeakPtr<blink::scheduler::TaskQueueManager>,base::TimeTicks,bool>,void __cdecl(void)>::Run [0x62C355B1+22]
	base::debug::TaskAnnotator::RunTask [0x623CB910+256]
	base::MessageLoop::RunTask [0x6237BC1B+1211]
	base::MessageLoop::DoWork [0x6237AE9E+606]
	base::MessagePumpDefault::Run [0x623CE248+424]
	base::MessageLoop::RunHandler [0x6237B757+103]
	base::RunLoop::Run [0x623BCE69+41]
	content::RendererMain [0x637227B6+486]
	content::RunNamedProcessTypeMain [0x623581C9+176]
	content::ContentMainRunnerImpl::Run [0x623580E8+274]
	content::ContentMain [0x623574C8+35]
	ChromeMain [0x6198D048+152]
	MainDllLoader::Launch [0x00C05F93+488]
	wWinMain [0x00C03F6A+368]
	__scrt_common_main_seh [0x00E0211F+253] (f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:255)
	BaseThreadInitThunk [0x75E1337A+18]
	RtlInitializeExceptionChain [0x76F392B2+99]
	RtlInitializeExceptionChain [0x76F39285+54]

Backtrace:
	base::debug::BreakDebugger [0x623CA9F9+9]
	logging::InitChromeLogging [0x6236F6DC+759]
	logging::LogMessage::~LogMessage [0x623725F7+455]
	blink::V8IdleTaskRunner::PostIdleTask [0x62CF0B8A+229]
	WTF::ArrayBufferContents::DataHolder::~DataHolder [0x63D23261+44]
	WTF::ThreadSafeRefCounted<WTF::ArrayBufferContents::DataHolder>::deref [0x63D23E8D+24]
	WTF::ArrayBuffer::`scalar deleting destructor' [0x62C7C2C7+14]
	WTF::RefCounted<WTF::ArrayBuffer>::deref [0x62C7C509+25]
	WTF::ArrayBufferView::~ArrayBufferView [0x63D24B0E+34]
	WTF::Uint8ClampedArray::`scalar deleting destructor' [0x62D52ABF+11]
	WTF::RefCounted<blink::DrawingBuffer>::deref [0x6343CF74+34]
	blink::FinalizerTraitImpl<blink::XPathNSResolver,1>::finalize [0x62D0D726+25]
	blink::HeapObjectHeader::finalize [0x622C922C+46]
	blink::NormalPage::sweep [0x622CAB88+234]
	blink::BaseArena::sweepUnsweptPage [0x622CAC21+42]
	blink::BaseArena::lazySweepWithDeadline [0x622C9A5B+188]
	blink::ThreadState::performIdleLazySweep [0x622CF772+397]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::ThreadState::*)(double),WTF::UnretainedWrapper<blink::ThreadState,1> >,void __cdecl(double)>::Run [0x622CDD5D+26]
	WTF::Function<void __cdecl(double),1>::operator() [0x62BB7F76+103]
	blink::WebScheduler::postNonNestableIdleTask [0x62BB8054+102]
	blink::scheduler::WebSchedulerImpl::runIdleTask [0x62BD101F+42]
	base::internal::FunctorTraits<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),void>::Invoke<std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::Idle [0x62BD0E9B+27]
	base::internal::Invoker<base::internal::BindState<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),base::internal::PassedWrapper<std::unique_ptr<blink::WebThread::IdleTask,std::d [0x62BD0EC1+33]
	base::internal::Invoker<base::internal::BindState<void (__cdecl*)(std::unique_ptr<blink::WebThread::IdleTask,std::default_delete<blink::WebThread::IdleTask> >,base::TimeTicks),base::internal::PassedWrapper<std::unique_ptr<blink::WebThread::IdleTask,std::d [0x62BD0FF0+25]
	blink::scheduler::SingleThreadIdleTaskRunner::RunTask [0x62C365EE+185]
	base::internal::FunctorTraits<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*)(base::Callback<void __cdecl(base::TimeTicks),1>),void>::Invoke<base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner> const &,base::Callback<void __cdecl( [0x62C361BF+34]
	base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*const &)(base::Callback<void __cdecl(base::TimeTicks),1>),base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner> const &,base::Callback<voi [0x62C361E4+34]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::SingleThreadIdleTaskRunner::*)(base::Callback<void __cdecl(base::TimeTicks),1>),base::WeakPtr<blink::scheduler::SingleThreadIdleTaskRunner>,base::Callback<void __cdecl(ba [0x62C36530+23]
	base::debug::TaskAnnotator::RunTask [0x623CB910+256]
	blink::scheduler::TaskQueueManager::ProcessTaskFromWorkQueue [0x62C35329+562]
	blink::scheduler::TaskQueueManager::DoWork [0x62C34A70+452]
	base::internal::FunctorTraits<void (__thiscall content::WebFileWriterBase::*)(__int64,bool),void>::Invoke<base::WeakPtr<content::WebFileWriterImpl> const &,__int64,bool> [0x62B92F05+31]
	base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall content::WebFileWriterBase::*const &)(__int64,bool),base::WeakPtr<content::WebFileWriterImpl> const &,__int64,bool> [0x62C3402C+34]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::TaskQueueManager::*)(base::TimeTicks,bool),base::WeakPtr<blink::scheduler::TaskQueueManager>,base::TimeTicks,bool>,void __cdecl(void)>::RunImpl<void (__thiscall blink::sc [0x62C34048+23]
	base::internal::Invoker<base::internal::BindState<void (__thiscall blink::scheduler::TaskQueueManager::*)(base::TimeTicks,bool),base::WeakPtr<blink::scheduler::TaskQueueManager>,base::TimeTicks,bool>,void __cdecl(void)>::Run [0x62C355B1+22]
	base::debug::TaskAnnotator::RunTask [0x623CB910+256]
	base::MessageLoop::RunTask [0x6237BC1B+1211]
	base::MessageLoop::DoWork [0x6237AE9E+606]
	base::MessagePumpDefault::Run [0x623CE248+424]
	base::MessageLoop::RunHandler [0x6237B757+103]
	base::RunLoop::Run [0x623BCE69+41]
	content::RendererMain [0x637227B6+486]
	content::RunNamedProcessTypeMain [0x623581C9+176]
	content::ContentMainRunnerImpl::Run [0x623580E8+274]
	content::ContentMain [0x623574C8+35]
	ChromeMain [0x6198D048+152]
	MainDllLoader::Launch [0x00C05F93+488]
	wWinMain [0x00C03F6A+368]
	__scrt_common_main_seh [0x00E0211F+253] (f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:255)
	BaseThreadInitThunk [0x75E1337A+18]
	RtlInitializeExceptionChain [0x76F392B2+99]
	RtlInitializeExceptionChain [0x76F39285+54]


Can try to reproduce with a Release build with dcheck_always_on=true, and, cd'd into src/:

content/test/gpu/run_gpu_integration_test.py --browser=release webgl_conformance

Comment 2 by hablich@chromium.org, Aug 18 2016

Cc: haraken@chromium.org jochen@chromium.org verwa...@chromium.org
Components: -Blink>JavaScript Blink>Bindings
Hmmm, this fails in the initializer which is part of the bindings not really part of V8.

Comment 3 by peria@chromium.org, Aug 25 2016

Status: Available (was: Untriaged)

Comment 4 by kbr@chromium.org, Sep 13 2016

Cc: yukishiino@chromium.org
Owner: haraken@chromium.org
Status: Assigned (was: Available)
https://build.chromium.org/p/tryserver.chromium.mac/builders/mac_chromium_rel_ng/builds/295581 is another example of this failure:

WebglConformance_conformance_uniforms_uniform_values_per_program (gpu_tests.webgl_conformance_integration_test.WebGLConformanceIntegrationTest) ... [30349:1299:0913/143412:ERROR:interface_registry.cc(99)] Failed to locate a binder for interface: dom_distiller::mojom::DistillabilityService
[30349:1299:0913/143412:ERROR:interface_registry.cc(99)] Failed to locate a binder for interface: dom_distiller::mojom::DistillabilityService
ok
WebglConformance_deqp_data_gles2_shaders_conditionals (gpu_tests.webgl_conformance_integration_test.WebGLConformanceIntegrationTest) ... [30353:1299:0913/143412:FATAL:V8Initializer.cpp(346)] Check failed: totalSize >= 0 (-4 vs. 0)
0   Chromium Framework                  0x00000001068784f3 _ZN4base5debug10StackTraceC1Ev + 19
1   Chromium Framework                  0x000000010689a887 _ZN7logging10LogMessageD2Ev + 71
2   Chromium Framework                  0x0000000109b84cf2 _ZN5blinkL37adjustAmountOfExternalAllocatedMemoryEx + 114
3   Chromium Framework                  0x0000000107e87c44 _ZN3WTF19ArrayBufferContentsD1Ev + 68
4   Chromium Framework                  0x0000000109a9f5c9 _ZN3WTF11ArrayBufferD2Ev + 25
5   Chromium Framework                  0x0000000107e891e2 _ZN3WTF15ArrayBufferViewD2Ev + 66
6   Chromium Framework                  0x000000010a3ac84e _ZN3WTF10Uint8ArrayD0Ev + 14
7   Chromium Framework                  0x000000010a0bbf5c _ZN5blink13DOMTypedArrayIN3WTF10Uint8ArrayEN2v810Uint8ArrayEED1Ev + 60
8   Chromium Framework                  0x00000001061037ed _ZN5blink10NormalPage5sweepEv + 253
9   Chromium Framework                  0x0000000106100291 _ZN5blink9BaseArena16sweepUnsweptPageEv + 65
10  Chromium Framework                  0x0000000106100508 _ZN5blink9BaseArena13completeSweepEv + 120
11  Chromium Framework                  0x0000000106108bdb _ZN5blink11ThreadState13completeSweepEv + 379
12  Chromium Framework                  0x000000010610a638 _ZN5blink11ThreadState28scheduleV8FollowupGCIfNeededENS_7BlinkGC8V8GCTypeE + 72
13  Chromium Framework                  0x0000000109b7bf1d _ZN5blink14V8GCController10gcEpilogueEPN2v87IsolateENS1_6GCTypeENS1_15GCCallbackFlagsE + 461
14  Chromium Framework                  0x0000000104eac2f4 _ZN2v88internal4Heap24PerformGarbageCollectionENS0_16GarbageCollectorENS_15GCCallbackFlagsE + 2804
15  Chromium Framework                  0x0000000104eaac7d _ZN2v88internal4Heap14CollectGarbageENS0_16GarbageCollectorENS0_23GarbageCollectionReasonEPKcNS_15GCCallbackFlagsE + 573
16  Chromium Framework                  0x0000000104e6129d _ZN2v88internal7Factory13NewFixedArrayEiNS0_13PretenureFlagE + 109
17  Chromium Framework                  0x0000000104fec482 _ZN2v88internal9HashTableINS0_14NameDictionaryENS0_19NameDictionaryShapeENS0_6HandleINS0_4NameEEEE3NewEPNS0_7IsolateEiNS0_15MinimumCapacityENS0_13PretenureFlagE + 130
18  Chromium Framework                  0x000000010504a6a5 _ZN2v88internal9HashTableINS0_14NameDictionaryENS0_19NameDictionaryShapeENS0_6HandleINS0_4NameEEEE14EnsureCapacityENS4_IS2_EEiS6_NS0_13PretenureFlagE + 133
19  Chromium Framework                  0x0000000104ffd856 _ZN2v88internal10DictionaryINS0_14NameDictionaryENS0_19NameDictionaryShapeENS0_6HandleINS0_4NameEEEE3AddENS4_IS2_EES6_NS4_INS0_6ObjectEEENS0_15PropertyDetailsEPi + 70
20  Chromium Framework                  0x0000000104fdb586 _ZN2v88internal14LookupIterator29ApplyTransitionToDataPropertyENS0_6HandleINS0_8JSObjectEEE + 566
21  Chromium Framework                  0x000000010501266f _ZN2v88internal6Object15AddDataPropertyEPNS0_14LookupIteratorENS0_6HandleIS1_EENS0_18PropertyAttributesENS1_11ShouldThrowENS1_14StoreFromKeyedE + 879
22  Chromium Framework                  0x0000000104f5b23e _ZN2v88internal7StoreIC5StoreENS0_6HandleINS0_6ObjectEEENS2_INS0_4NameEEES4_NS3_14StoreFromKeyedE + 718
23  Chromium Framework                  0x0000000104f5e1eb _ZN2v88internal12KeyedStoreIC5StoreENS0_6HandleINS0_6ObjectEEES4_S4_ + 219
24  Chromium Framework                  0x0000000104f64294 _ZN2v88internalL35__RT_impl_Runtime_KeyedStoreIC_MissENS0_9ArgumentsEPNS0_7IsolateE + 436
25  Chromium Framework                  0x0000000104f63e85 _ZN2v88internal25Runtime_KeyedStoreIC_MissEiPPNS0_6ObjectEPNS0_7IsolateE + 245
26  ???                                 0x000026320a1043a7 0x0 + 41996359058343


Kentaro, could you please find someone on the bindings team to investigate this?

Comment 5 by haraken@chromium.org, Sep 14 2016

Owner: yukishiino@chromium.org
yukishiino: Would you take a look at this?

It looks like we're mis-calculating the size of array buffers somewhere...

Comment 6 by kbr@chromium.org, Sep 17 2016

Labels: -Pri-2 Pri-1
Another example:
https://build.chromium.org/p/tryserver.chromium.win/builders/win_optional_gpu_tests_rel/builds/3762
https://build.chromium.org/p/tryserver.chromium.win/builders/win_optional_gpu_tests_rel/builds/3762/steps/webgl_conformance_tests%20on%20ATI%20GPU%20on%20Windows%20%28with%20patch%29%20on%20Windows-2008ServerR2-SP1/logs/stdio

[4932:1664:0915/160433:FATAL:v8initializer.cpp(346)] Check failed: totalSize >= 0 (-4 vs. 0)
Backtrace:
	base::debug::StackTrace::StackTrace [0x60FCD877+23]
	logging::LogMessage::~LogMessage [0x60F76541+49]
	blink::V8IdleTaskRunner::PostIdleTask [0x6199A486+229]
	WTF::ArrayBufferContents::DataHolder::~DataHolder [0x6297C2BC+44]
	WTF::RefCounted<WTF::ArrayBuffer>::deref [0x6192F4AD+25]
	blink::FinalizerTraitImpl<blink::XPathNSResolver,1>::finalize [0x61964763+22]
	blink::HeapObjectHeader::finalize [0x60E5AC3E+46]
	blink::NormalPage::sweep [0x60E5C58A+234]
	blink::BaseArena::sweepUnsweptPage [0x60E5C623+42]
	blink::ThreadState::scheduleV8FollowupGCIfNeeded [0x60E6337F+77]
	blink::V8GCController::gcEpilogue [0x61990A2F+459]
	v8::internal::Heap::CallGCEpilogueCallbacks [0x60950A37+215]
	v8::internal::Heap::PerformGarbageCollection [0x6095F670+1728]
	v8::internal::Heap::CollectGarbage [0x60951B76+422]
	v8::internal::Factory::NewFixedArray [0x60924A0C+124]
	v8::internal::HashTable<v8::internal::SeededNumberDictionary,v8::internal::SeededNumberDictionaryShape,unsigned int>::New [0x60A42358+168]
	v8::internal::HashTable<v8::internal::NameDictionary,v8::internal::NameDictionaryShape,v8::internal::Handle<v8::internal::Name> >::EnsureCapacity [0x60A2B359+169]
	v8::internal::Dictionary<v8::internal::NameDictionary,v8::internal::NameDictionaryShape,v8::internal::Handle<v8::internal::Name> >::Add [0x60A1B3A8+56]
	v8::internal::LookupIterator::ApplyTransitionToDataProperty [0x60A0BAD6+646]
	v8::internal::Object::AddDataProperty [0x60A1C860+784]
	v8::internal::ApiNatives::CreateApiFunction [0x60626B1E+1598]
	v8::internal::experimental::BuildCodeFromFastAccessorBuilder [0x60625948+3304]
	v8::internal::ApiNatives::InstantiateFunction [0x6062747B+507]
	v8::internal::HashTable<v8::internal::UnseededNumberDictionary,v8::internal::UnseededNumberDictionaryShape,unsigned int>::FindEntry [0x60626F84+628]
	v8::internal::ApiNatives::InstantiateFunction [0x60627338+184]
	v8::internal::ApiNatives::InstantiateFunction [0x606272CB+75]
	v8::FunctionTemplate::GetFunction [0x6063509B+347]
	blink::V8PerContextData::constructorForTypeSlowCase [0x619A6BAC+172]
	blink::V8PerContextData::constructorForType [0x619A6AF2+52]
	blink::V8PerContextData::createWrapperFromCacheSlowCase [0x619A6DB6+84]
	blink::V8PerContextData::createWrapperFromCache [0x619A08B6+55]
	blink::V8DOMWrapper::createWrapper [0x619A0825+110]
	blink::ScriptWrappable::wrap [0x6197D128+95]
	blink::toV8 [0x61921CE2+84]
	blink::toV8 [0x6213A734+132]
	blink::v8SetReturnValue<v8::FunctionCallbackInfo<v8::Value> > [0x6209FDA0+25]
	blink::v8SetReturnValue<v8::FunctionCallbackInfo<v8::Value> > [0x620A0012+651]
	v8::internal::FunctionCallbackArguments::Call [0x606248DA+74]
	v8::internal::Isolate::typed_array_prototype [0x6069D6E8+1768]
	v8::internal::Builtin_HandleApiCallAsFunction [0x6069E328+584]
	v8::internal::Builtin_HandleApiCall [0x6069DFE8+168]

I'm raising this to P1. It's a non-trivial source of flakiness in the WebGL tests per  Issue 596622 .

Comment 7 by yukishiino@chromium.org, Sep 30 2016

Status: Started (was: Assigned)
Working on https://codereview.chromium.org/2343643003/
Project Member

Comment 8 by bugdroid1@chromium.org, Oct 3 2016 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/1851a7c26bc46902c7f62de0bcabf774911596c0

commit 1851a7c26bc46902c7f62de0bcabf774911596c0
Author: yukishiino <yukishiino@chromium.org>
Date: Mon Oct 03 09:45:06 2016

binding: Makes assertion of adjustAmountOfExternalAllocatedMemory more exact.

1) Makes sure that ABC::s_adjustAoEAM is initialized before its use.
2) Makes the assertion in adjustAoEAM thread-safe.

BUG= 638069 

Review-Url: https://codereview.chromium.org/2343643003
Cr-Commit-Position: refs/heads/master@{#422396}

[modify] https://crrev.com/1851a7c26bc46902c7f62de0bcabf774911596c0/third_party/WebKit/Source/bindings/core/v8/V8Initializer.cpp
[modify] https://crrev.com/1851a7c26bc46902c7f62de0bcabf774911596c0/third_party/WebKit/Source/wtf/typed_arrays/ArrayBufferContents.cpp
[modify] https://crrev.com/1851a7c26bc46902c7f62de0bcabf774911596c0/third_party/WebKit/Source/wtf/typed_arrays/ArrayBufferContents.h

Comment 9 by yukishiino@chromium.org, Oct 3 2016

Status: Fixed (was: Started)
The CL above (#8) should have fixed the issue.

Comment 10 by kbr@chromium.org, Oct 3 2016 

Thank you Yuki!
►

Sign in to add a comment